Set library defaults for algorithm blacklist

simplesamlphp · Aug 5, 2024 · 9c3440d · 9c3440d
1 parent 9ee5910
commit 9c3440d
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/src/SAML11/Compat/AbstractContainer.php b/src/SAML11/Compat/AbstractContainer.php
@@ -10,6 +10,9 @@
 use SimpleSAML\SAML11\XML\ExtensionPointInterface;
 use SimpleSAML\XML\AbstractElement;
 use SimpleSAML\XML\Exception\SchemaViolationException;
+use SimpleSAML\XMLSecurity\Alg\Encryption\EncryptionAlgorithmFactory;
+use SimpleSAML\XMLSecurity\Alg\KeyTransport\KeyTransportAlgorithmFactory;
+use SimpleSAML\XMLSecurity\Alg\Signature\SignatureAlgorithmFactory;
 
 use function array_key_exists;
 use function implode;
@@ -24,7 +27,11 @@ abstract class AbstractContainer
     protected array $registry = [];
 
     /** @var array|null */
-    protected ?array $blacklistedEncryptionAlgorithms;
+    protected ?array $blacklistedEncryptionAlgorithms = [
+        EncryptionAlgorithmFactory::DEFAULT_BLACKLIST,
+        KeyTransportAlgorithmFactory::DEFAULT_BLACKLIST,
+        SignatureAlgorithmFactory::DEFAULT_BLACKLIST,
+    ];
 
 
     /**