Release 1.1.4

SAML-Toolkits · Jun 27, 2016 · 3659de8 · 3659de8
1 parent 7ec8ca0
commit 3659de8
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -102,6 +102,12 @@ In production, the **strict** parameter MUST be set as **"true"**. Otherwise
 your environment is not secure and will be exposed to attacks.
 
 
+Security Guidelines
+-------------------
+
+If you believe you have discovered a security vulnerability in this toolkit, please report it at https://www.onelogin.com/security with a description. We follow responsible disclosure guidelines, and will work with you to quickly find a resolution.
+
+
 Getting started
 ---------------
 

diff --git a/changelog.md b/changelog.md
@@ -1,5 +1,9 @@
 # python3-saml changelog
 
+### 1.1.4 (Jun 27, 2016)
+* Change the decrypt assertion process.
+* Add 2 extra validations to prevent Signature wrapping attacks.
+
 ### 1.1.3 (Jun 02, 2016)
 * Fix Metadata XML (RequestedAttribute)
 * Fix Windows specific Unix date formatting bug.

diff --git a/setup.py b/setup.py
@@ -9,7 +9,7 @@
 
 setup(
     name='python3-saml',
-    version='1.1.3',
+    version='1.1.4',
     description='Onelogin Python Toolkit. Add SAML support to your Python software using this library',
     classifiers=[
         'Development Status :: 4 - Beta',