All free flowsInspect Signature References in an Encoded SAML Message
Decode a POST or Redirect payload and review its reference targets and duplicate IDs with the complete original XML and diagnostic reports.
Processing stays in your browser; code and assets download as needed. Original and checkpoint downloads retain source content, including omitted values. Reset and Exit stop this session’s owned work; they do not establish secure erasure or anonymity.
This flow needs JavaScript. If it does not load, refresh the page and try again.
About this flow
Decode a POST or Redirect payload and review its reference targets and duplicate IDs with the complete original XML and diagnostic reports.
Limitations
- Choose or paste the decoded query-parameter value as canonical padded Base64, up to 100,000 UTF-16 units and 400,000 UTF-8 bytes. Select POST or raw-DEFLATE Redirect; full URLs and whitespace refuse. Original decoder limits: 100,000 decoded units, 400,000 expanded bytes, 20,000 XML elements, 40 levels, supported SAML 2.0 protocol root. No DTD, external entities, processing instructions or encrypted-content decryption. The final ZIP keeps the raw encoded input, complete decoded XML, decoder report and reference report. Duplicate IDs and reference target counts are literal structural observations: URI fragments are not percent-decoded and external references are never fetched. Empty URI reports the document target; this does not verify XML canonicalization, digest values, signatures, key trust, issuer, audience, time or authentication. Private values remain unredacted. Redirect needs browser raw-DEFLATE support.
- Original workers30seconds/4MiB combined native output. Owned90second connections,8MiB compressed/expanded ZIP,4MiB entry,4 checkpoint/6 final members. Source filename512 UTF16 units. Complete checkpoint association revalidated against actual source by original bounded decoder; no signed-origin claim.
