fixess

Author: elbuo8

lib/passport-wsfed-saml2/saml.js

@@ -245,9 +245,6 @@ class SAML {
 
     const now = new Date();
 
-    // ideally, the parameters provided to new Date would validate that produce a valid date object, but for the
-    // rollout we will maintain the same behavior we currently have to prevent introducing additional breaking changes
-
     if (notBefore) {
       const notBeforeDate = new Date(notBefore);
       notBeforeDate.setMinutes(notBeforeDate.getMinutes() - this.options.clockSkew);

lib/passport-wsfed-saml2/samlp.js

@@ -212,7 +212,6 @@ class Samlp {
         try {
           // we are not converting SAMLRequest into a DOM before sending to xml-crypto because at the current time we allow the following test:
           // invalid CDATA xml that does not cause an error. This probably *should* cause an error, but it doesn't.
-          // in a subsequent release we should address this.
           sig.computeSignature(SAMLRequest, { location: { reference: "//*[local-name(.)='Issuer']", action: 'after' } }); // Signature element must be located after Issuer
         } catch (e) {
           return callback(new Error('fail to compute signature'));