OndrishD

VerifyAssertion does not fail when return URL with different parameter is provided.

3

There is a bug on **line 994** in openid.js The foreach iterator for query parameters is checking for different values on `receivedReturnUrl` and `assertionUrl` which is the same URL as...