onelogin/php-saml — pull request #16 by danielbeardsley (2013-09-03 09:54:11+00:00)
Title: queryAssertion: allow whole response to be signed

Some providers sign the whole response, not just the "Assertion"
element. This change makes the xpaths to find the signature and the
assertion a little more flexible.

Note: The validity of the document is determined elsewhere, this code
mainly tries to find the assertion that *was* signed.