diff --git a/README.md b/README.md index e652786e..106e93c2 100644 --- a/README.md +++ b/README.md @@ -14,6 +14,8 @@ This version supports Python3. There is a separate version that only support Pyt #### Warning #### +Version 1.8.0 sets strict mode active by default + Update ``python3-saml`` to ``1.5.0``, this version includes security improvements for preventing XEE and Xpath Injections. Update ``python3-saml`` to ``1.4.0``, this version includes a fix for the [CVE-2017-11427](https://www.cvedetails.com/cve/CVE-2017-11427/) vulnerability. diff --git a/changelog.md b/changelog.md index 9d7e4384..f0e28708 100644 --- a/changelog.md +++ b/changelog.md @@ -1,6 +1,8 @@ # python3-saml changelog -### 1.7.1 (unrelease) -* Drop python3.4 support +### 1.8.0 (Sep 11, 2019) +* Set true as the default value for strict setting +* [#152](https://github.com/onelogin/python3-saml/pull/152/files) Don't clean xsd and xsi namespaces +* Drop python3.4 support due lxml. See lxml 4.4.0 (2019-07-27) ### 1.7.0 (Jul 02, 2019) * Adjusted acs endpoint to extract NameQualifier and SPNameQualifier from SAMLResponse. Adjusted single logout service to provide NameQualifier and SPNameQualifier to logout method. Add getNameIdNameQualifier to Auth and SamlResponse. Extend logout method from Auth and LogoutRequest constructor to support SPNameQualifier parameter. Align LogoutRequest constructor with SAML specs diff --git a/setup.py b/setup.py index 3a248144..cb483f2d 100644 --- a/setup.py +++ b/setup.py @@ -9,7 +9,7 @@ setup( name='python3-saml', - version='1.7.0', + version='1.8.0', description='Onelogin Python Toolkit. Add SAML support to your Python software using this library', classifiers=[ 'Development Status :: 5 - Production/Stable',