Harden AuthXMLRequest.setPrincipal against arbitrary class instantiation (same pattern as GHSA-wg5r-wc3x-39vc)#1088

BarakSrour wants to merge 2 commits into

OpenIdentityPlatform:masterOpenIdentityPlatform/OpenAM:masterfrom

BarakSrour:harden/authxmlrequest-setprincipal-reflectionBarakSrour/OpenAM:harden/authxmlrequest-setprincipal-reflectionCopy head branch name to clipboard