prep 3.0.2 release

CHANGELOG.txt

@@ -1,6 +1,17 @@
 xmlseclibs.php
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
-??, ??? 2017, 3.0.2-dev
+27, Sep 2018, 3.0.2
+Security Improvements:
+- OpenSSL is now a requirement rather than suggestion. (Slaven Bacelic)
+- Filter input to avoid XPath injection. (Jaime Pérez)
+
+Bug Fixes:
+- Fix missing parentheses (Tim van Dijen)
+
+Improvements:
+- Use strict comparison operator to compare digest values. (Jaime Pérez)
+- Remove call to file_get_contents that doesn't even work. (Jaime Pérez)
+- Document potentially dangerous return value behaviour. (Thijs Kinkhorst)
 
 31, Aug 2017, 3.0.1
 Bug Fixes:

LICENSE

@@ -1,4 +1,4 @@
-Copyright (c) 2007-2016, Robert Richards <[email protected]>.
+Copyright (c) 2007-2018, Robert Richards <[email protected]>.
 All rights reserved.
 
 Redistribution and use in source and binary forms, with or without

README.md

@@ -5,7 +5,7 @@ xmlseclibs is a library written in PHP for working with XML Encryption and Signa
 The author of xmlseclibs is Rob Richards.
 
 # Branches
-Both the master and the 2.0 branches are actively maintained. The 1.4 branch is only updated for security related issues.
+Both the master and the 2.0 branches are actively maintained.
 * master: Removes mcrypt usage requiring 5.4+ (5.6.24+ recommended for security reasons)
 * 2.0: Contains namespace support requiring 5.3+
 * 1.4: Contains auto-loader support while also maintaining backwards compatiblity with the older 1.3 version using the xmlseclibs.php file. Supports PHP 5.2+

src/XMLSecEnc.php

@@ -10,7 +10,7 @@
 /**
  * xmlseclibs.php
  *
- * Copyright (c) 2007-2017, Robert Richards <[email protected]>.
+ * Copyright (c) 2007-2018, Robert Richards <[email protected]>.
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
@@ -43,7 +43,7 @@
  * POSSIBILITY OF SUCH DAMAGE.
  *
  * @author    Robert Richards <[email protected]>
- * @copyright 2007-2017 Robert Richards <[email protected]>
+ * @copyright 2007-2018 Robert Richards <[email protected]>
  * @license   http://www.opensource.org/licenses/bsd-license.php  BSD License
  */
 

src/XMLSecurityDSig.php

@@ -11,7 +11,7 @@
 /**
  * xmlseclibs.php
  *
- * Copyright (c) 2007-2017, Robert Richards <[email protected]>.
+ * Copyright (c) 2007-2018, Robert Richards <[email protected]>.
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
@@ -44,7 +44,7 @@
  * POSSIBILITY OF SUCH DAMAGE.
  *
  * @author    Robert Richards <[email protected]>
- * @copyright 2007-2017 Robert Richards <[email protected]>
+ * @copyright 2007-2018 Robert Richards <[email protected]>
  * @license   http://www.opensource.org/licenses/bsd-license.php  BSD License
  */
 

src/XMLSecurityKey.php

@@ -7,7 +7,7 @@
 /**
  * xmlseclibs.php
  *
- * Copyright (c) 2007-2017, Robert Richards <[email protected]>.
+ * Copyright (c) 2007-2018, Robert Richards <[email protected]>.
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
@@ -40,7 +40,7 @@
  * POSSIBILITY OF SUCH DAMAGE.
  *
  * @author    Robert Richards <[email protected]>
- * @copyright 2007-2017 Robert Richards <[email protected]>
+ * @copyright 2007-2018 Robert Richards <[email protected]>
  * @license   http://www.opensource.org/licenses/bsd-license.php  BSD License
  */
 

xmlseclibs.php

@@ -2,7 +2,7 @@
 /**
  * xmlseclibs.php
  *
- * Copyright (c) 2007-2016, Robert Richards <[email protected]>.
+ * Copyright (c) 2007-2018, Robert Richards <[email protected]>.
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
@@ -35,9 +35,9 @@
  * POSSIBILITY OF SUCH DAMAGE.
  *
  * @author    Robert Richards <[email protected]>
- * @copyright 2007-2017 Robert Richards <[email protected]>
+ * @copyright 2007-2018 Robert Richards <[email protected]>
  * @license   http://www.opensource.org/licenses/bsd-license.php  BSD License
- * @version   3.0.1
+ * @version   3.0.2
  */
 
 $xmlseclibs_srcdir = dirname(__FILE__) . '/src/';