From 21b676bdf55452750d8ee5facd2f6e3c51927315 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 2 Oct 2024 21:56:25 +0200 Subject: [PATCH] Add sponsor: 84codes --- README.md | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 7a245b2c..9f81dbc9 100644 --- a/README.md +++ b/README.md @@ -55,13 +55,19 @@ ruby-saml never enables DTDLOAD, and it never disables NONET. The OneLogin::RubySaml::IdpMetadataParser class does not validate in any way the URL that is introduced in order to be parsed. -Usually the same administrator that handles the Service Provider also sets the URL to +Usually, the same administrator that handles the Service Provider also sets the URL to the IdP, which should be a trusted resource. But there are other scenarios, like a SAAS app where the administrator of the app -delegates this functionality to other users. In this case, extra precaution should +delegates this functionality to other users. In this case, extra precautions should be taken in order to validate such URL inputs and avoid attacks like SSRF. +### Sponsors + +Thanks to the following sponsors for their support: + +[84codes](https://www.84codes.com) + ## Getting Started In order to use Ruby SAML you will need to install the gem (either manually or using Bundler), @@ -71,7 +77,7 @@ Using `Gemfile` ```ruby # latest stable -gem 'ruby-saml', '~> 1.11.0' +gem 'ruby-saml', '~> 1.17.0' # or track master for bleeding-edge gem 'ruby-saml', :github => 'saml-toolkit/ruby-saml'