CVE-2017-11430: OmniAuth-SAML authentication bypass via incorrect XML canonicalization and DOM traversal

The vulnerability stems from improper handling of XML canonicalization and text extraction in SAML responses. The NameID extraction function uses XML DOM traversal APIs (like REXML's text method) that stop at the first text node, ignoring subsequent text after comments. This allows attackers to inject comments to manipulate the effective NameID value while keeping the cryptographic signature valid. The function responsible for parsing NameID (commonly found in response handling code) would be the primary vulnerable component, as confirmed by the described attack vector and Ruby's REXML behavior.