We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 60627ba commit acac9e9Copy full SHA for acac9e9
lib/onelogin/ruby-saml/saml_message.rb
@@ -93,10 +93,16 @@ def decode_raw_saml(saml, settings = nil)
93
94
decoded = decode(saml)
95
begin
96
- inflate(decoded)
+ message = inflate(decoded)
97
rescue
98
- decoded
+ message = decoded
99
end
100
+
101
+ if message.bytesize > settings.message_max_bytesize
102
+ raise ValidationError.new("Encoded SAML Message exceeds " + settings.message_max_bytesize.to_s + " bytes, so was rejected")
103
+ end
104
105
+ message
106
107
108
# Deflate, base64 encode and url-encode a SAML Message (To be used in the HTTP-redirect binding)
0 commit comments