Bugfixes after testing

Author: Boy Baukema

src/OneLogin/Saml/Response.php

@@ -89,8 +89,8 @@ private function _queryAssertion($assertionXpath)
         $xpath->registerNamespace('saml'    , 'urn:oasis:names:tc:SAML:2.0:assertion');
         $xpath->registerNamespace('ds'      , 'http://www.w3.org/2000/09/xmldsig#');
 
-        $signatureQuery = '//ds:Reference[@URI]';
-        $id = substr($xpath->query($signatureQuery)->item(0)->getAttribute('URI'), 1);
+        $signatureQuery = '//saml:Assertion/ds:Signature/ds:SignedInfo/ds:Reference';
+        $id = substr($xpath->query($signatureQuery)->item(0)->attributes->getNamedItem('URI')->nodeValue, 1);
 
         $nameQuery = "/samlp:Response/saml:Assertion[@ID='$id']" . $assertionXpath;
         return $xpath->query($nameQuery);

src/OneLogin/Saml/XmlSec.php

@@ -27,7 +27,7 @@ class OneLogin_Saml_XmlSec
     public function __construct(OneLogin_Saml_Settings $settings, OneLogin_Saml_Response $response)
     {
         $this->_settings = $settings;
-        $this->_document = $response->document;
+        $this->_document = clone $response->document;
     }
 
     /**