Arbitrary attributes cannot be from saml-namespaces

Author: tvdijen

src/XML/saml/AbstractSubjectConfirmationData.php

@@ -94,14 +94,6 @@ public function __construct(
         }
 
         $this->setElements($children);
-
-        foreach ($namespacedAttributes as $attr) {
-            Assert::notNull(
-                $attr->getNamespaceURI(),
-                "Local (non-namespaced) attributes are not allowed.",
-                ProtocolViolationException::class,
-            );
-        }
         $this->setAttributesNS($namespacedAttributes);
     }
 

src/XML/saml/Attribute.php

@@ -37,6 +37,16 @@ class Attribute extends AbstractSamlElement implements
     /** The namespace-attribute for the xs:anyAttribute element */
     public const string XS_ANY_ATTR_NAMESPACE = NS::OTHER;
 
+    /**
+     * The exclusions for the xs:anyAttribute element
+     *
+     * @var array<int, array<int, string>>
+     */
+    public const array XS_ANY_ATTR_EXCLUSIONS = [
+        ['urn:oasis:names:tc:SAML:2.0:assertion', '*'],
+        ['urn:oasis:names:tc:SAML:2.0:protocol', '*'],
+    ];
+
 
     /**
      * Initialize an Attribute.