Skip to content

Commit f21085e

Browse files
author
Ari Pollak
committed
Don't require open-uri
It isn't needed here anyway, and is dangerous from a security perspective - simply doing a require 'ruby-saml' causes every open() in the calling program to suddenly start accepting any HTTP/FTP URIs, which could be very surprising and unexpected.
1 parent adb7aa4 commit f21085e

1 file changed

Lines changed: 0 additions & 1 deletion

File tree

lib/onelogin/ruby-saml/logoutresponse.rb

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,6 @@
22
require "time"
33
require "base64"
44
require "zlib"
5-
require "open-uri"
65

76
module Onelogin
87
module Saml

0 commit comments

Comments
 (0)