iFixit/php-saml — pull request #3 by danielbeardsley (2013-09-03 09:47:13+00:00)
Title: queryAssertion: allow whole response to be signed

Some providers sign the whole response, not just the "Assertion"
element. This change makes the xpaths to find the signature and the
assertion a little more flexible.

Note: The validity of the document is determined elsewhere, this code
mainly just tries to find the assertion that *was* signed.