Skip to content

Harden AuthXMLRequest.setPrincipal against arbitrary class instantiation (same pattern as GHSA-wg5r-wc3x-39vc) - #1088

Merged
vharseko merged 3 commits into
OpenIdentityPlatform:masterfrom
BarakSrour:harden/authxmlrequest-setprincipal-reflection
Aug 4, 2026
Merged

Harden AuthXMLRequest.setPrincipal against arbitrary class instantiation (same pattern as GHSA-wg5r-wc3x-39vc)#1088
vharseko merged 3 commits into
OpenIdentityPlatform:masterfrom
BarakSrour:harden/authxmlrequest-setprincipal-reflection

Reword the setPrincipal comment: state that it has no in-tree callers

18ebdeb
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

10 warnings
build-maven (ubuntu-latest, 26)
succeeded Aug 4, 2026 in 27m 55s