The signature handling code does not pass the list of signed xml fragments to the signature reader in any way. It can be fooled by a document constructed as follows:
<!-- envelope omitted for brevity -->
<samlp:Assertion>
<samlp:Assertion>
<!-- original signature here -->
<samlp:Assertion>
<!-- whatever you want -->
</samlp:Assertion>
The signature handling code does not pass the list of signed xml fragments to the signature reader in any way. It can be fooled by a document constructed as follows: