test/response_test.rb in ruby-saml-1.3.0 vs test/response_test.rb in ruby-saml-1.3.1
- old
+ new
@@ -1286,19 +1286,6 @@
assert_empty response.errors
assert_equal "test", response.attributes[:uid]
assert_equal "ZdrjpwEdw22vKoxWAbZB78/gQ7s=", response.attributes.single('urn:oid:1.3.6.1.4.1.5923.1.1.1.10')
end
end
-
- describe "attack" do
- it "should not be valid" do
- settings.private_key = ruby_saml_key_text
- signature_wrapping_attack = read_invalid_response("encrypted_new_attack.xml.base64")
- response_wrapped = OneLogin::RubySaml::Response.new(signature_wrapping_attack, :settings => settings)
- response_wrapped.stubs(:conditions).returns(nil)
- response_wrapped.stubs(:validate_subject_confirmation).returns(true)
- settings.idp_cert_fingerprint = "385b1eec71143f00db6af936e2ea12a28771d72c"
- assert !response_wrapped.is_valid?
- end
- end
-
end