Found an interesting reference: http://blog.sendsafely.com/web-based-single-sign-on-and-the-dangers-of-saml-xml-parsing
Found an interesting reference: http:// blog.sendsafely .com/web- based-single- sign-on- and-the- dangers- of-saml- xml-parsing