Fix XSS via missing Binding syntax validation

[witekest]

Cross-site Scripting via missing Binding syntax validation vulnerability has been reported for the package github.com/crewjam/saml

https://nvd.nist.gov/vuln/detail/CVE-2023-45683

The vulnerability has been fixed upstream in the version 0.4.14 of the package.

GHSA-267v-3v32-g6q5

Grafana maintains own fork of the package in this repository. This pull request includes the cherry-pick from the upstream repository.

(cherry picked from commit crewjam/saml@b07b16c)

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[IevaVasiljeva]

Thanks for your contribution! Can you please accept the CLA so that we can merge this PR? More information is in this message: #34 (comment)

[witekest]

I did accept the CLA but the check seems not to work for me.

[witekest]

[mgyongyosi]

Hi @witekest, thank you for your contribution and for opening the PR. After some consideration we decided to sync with the crewjam/saml repo by rebasing our main on top of upstream/main to better follow the changes between the upstream and our forked repo. So unfortunately we need to close this PR, because these changes have already been added to the repo with the rebase.

Thanks again! 🙇

[witekest]

Thanks as well