Skip to content

Limit size of SAML requests and response - #1263

Merged
CarlSchwan merged 2 commits into
masterfrom
carl/libxml2-workaround
Oct 23, 2026
Merged

CarlSchwan merged 2 commits into
masterfrom
carl/libxml2-workaround

Conversation

@CarlSchwan

Copy link
Copy Markdown
Member

Avoid spending too much time on some requests

🤖 AI (if applicable)

  • The content of this PR was partly or fully generated using AI (N/A)

@CarlSchwan
CarlSchwan requested a review from blizzz as a code owner October 23, 2026 14:26
@CarlSchwan
CarlSchwan force-pushed the carl/libxml2-workaround branch from 170e599 to 84fbc1a Compare October 23, 2026 14:32
Avoid spending too much time on some requests

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
roave/security-advisories now conflicts with all PHP 8.1 releases,
which breaks the check on the minimum supported PHP version.

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
@CarlSchwan
CarlSchwan force-pushed the carl/libxml2-workaround branch from 84fbc1a to 9a3c7d9 Compare October 23, 2026 14:37
@CarlSchwan
CarlSchwan enabled auto-merge October 23, 2026 14:38
@CarlSchwan
CarlSchwan disabled auto-merge October 23, 2026 14:45
@CarlSchwan
CarlSchwan merged commit ad341cb into master Oct 23, 2026
61 checks passed
@CarlSchwan
CarlSchwan deleted the carl/libxml2-workaround branch October 23, 2026 14:45
CarlSchwan added a commit that referenced this pull request Oct 23, 2026
Added

* feat(support): Add section to system report by @CarlSchwan in #1232

Fixed

* fix(logout): Ensure we handle logout button correctly by @CarlSchwan in #1235
* Fix SAML validation behind reverse proxy with webroot by @rodo6502 in #1236
* fix: Use assertGroupMemberships also in the DAV plugin by @CarlSchwan in #1264
* Limit size of SAML requests and response by @CarlSchwan in #1263

Dependencies

* fix(npm): Move some dependencies to dev dependencies by @CarlSchwan in #1245
* build(deps): bump firebase/php-jwt from 7.1.0 to 7.2.1 by @dependabot[bot] in #1241
* build(deps): bump source-map-js from 1.2.1 to 1.2.2 by @dependabot[bot] in #1255
* build(deps): bump @vue/server-renderer and vue by @dependabot[bot] in #1258
* build(deps): bump postcss-selector-parser from 7.1.5 to 7.1.6 by @dependabot[bot] in #1257
* build(deps): bump dompurify from 3.4.13 to 3.4.16 by @dependabot[bot] in #1247
* build(deps): bump axios from 1.18.1 to 1.20.0 by @dependabot[bot] in #1248
* build(deps): bump follow-redirects from 1.16.0 to 1.16.1 by @dependabot[bot] in #1261

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant