Sign in as anyone: Bypassing SAML SSO authentication with parser differentials
github.blog