playframework/Play20 — pull request #334 by juretta (2012-05-26 12:30:45+00:00)
Title: Fix OpenID data confusion problem by only extracting signed attributes

This change will only extract attributes returned via OpenID Attribute Exchange
that are in the list of signed fields.

This mitigates the problem outlined here:
http://openid.net/2011/05/05/attribute-exchange-security-alert/