Add assertion to ensure binding matches idpdisco-specs

simplesamlphp · Oct 18, 2023 · 604358b · 604358b
1 parent 0e47e15
commit 604358b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/SAML2/XML/idpdisc/DiscoveryResponse.php b/src/SAML2/XML/idpdisc/DiscoveryResponse.php
@@ -6,6 +6,7 @@
 
 use SimpleSAML\Assert\Assert;
 use SimpleSAML\SAML2\Constants as C;
+use SimpleSAML\SAML2\Exception\ProtocolViolationException;
 use SimpleSAML\SAML2\XML\md\AbstractIndexedEndpointType;
 
 /**
@@ -48,6 +49,7 @@ public function __construct(
  array $attributes = [],
  array $children = [],
  ) {
+ Assert::saml($binding, C::BINDING_IDPDISC, ProtocolViolationException::class);
  Assert::null(
  $unused,
  'The \'ResponseLocation\' attribute must be omitted for idpdisc:DiscoveryResponse.',