Add assertion to ensure binding matches idpdisco-specs

simplesamlphp · Oct 18, 2023 · 604358b · 604358b
1 parent 0e47e15
commit 604358b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/SAML2/XML/idpdisc/DiscoveryResponse.php b/src/SAML2/XML/idpdisc/DiscoveryResponse.php
@@ -6,6 +6,7 @@
 
 use SimpleSAML\Assert\Assert;
 use SimpleSAML\SAML2\Constants as C;
+use SimpleSAML\SAML2\Exception\ProtocolViolationException;
 use SimpleSAML\SAML2\XML\md\AbstractIndexedEndpointType;
 
 /**
@@ -48,6 +49,7 @@ public function __construct(
         array $attributes = [],
         array $children = [],
     ) {
+        Assert::saml($binding, C::BINDING_IDPDISC, ProtocolViolationException::class);
         Assert::null(
             $unused,
             'The \'ResponseLocation\' attribute must be omitted for idpdisc:DiscoveryResponse.',