onelogin/python-saml — pull request #22 by mtyaka (2014-06-24 07:18:26+00:00)
Title: Don't use default global XML parser to parse response.

If the default global parser is set to remove blank text nodes (remove_blank_text=True),
signature validation will fail because the whitespace inside the element matters.

I ran into this problem when trying to use python-saml inside a larger application that set the default XMLParser to a custom parser that wasn't preserving whitespace.

Instead of using the default parser, construct a new XMLParser to parse the response.