See: https://bsky.app/profile/filippo.abyssdomain.expert/post/3lezjsf6wc2os that...

		securesaml 11 months ago \| parent \| context \| favorite \| on: Unexpected security footguns in Go's parsers See: https://bsky.app/profile/filippo.abyssdomain.expert/post/3le... that was about a signature wrapping attack in crypto, but it also applies here.