[shibboleth-sp2] 21/25: Adding header sanitizing option.

Ferenc Wágner wferi-guest at moszumanska.debian.org
Tue Jan 26 21:30:04 UTC 2016


This is an automated email from the git hooks/post-receive script.

wferi-guest pushed a commit to annotated tag 1.3.2
in repository shibboleth-sp2.

commit 5aa554a135d739acca10e8668ccc0471156bfec2
Author: Scott Cantor <cantor.2 at osu.edu>
Date:   Sat Jun 13 03:55:47 2009 +0000

    Adding header sanitizing option.
---
 configs/shibboleth.xml.in               | 2 +-
 schemas/shibboleth-targetconfig-1.0.xsd | 4 +++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/configs/shibboleth.xml.in b/configs/shibboleth.xml.in
index 8989b82..76430a1 100644
--- a/configs/shibboleth.xml.in
+++ b/configs/shibboleth.xml.in
@@ -81,7 +81,7 @@
 		</RequestMapProvider>
 		
 		<Implementation>
-			<ISAPI normalizeRequest="true">
+			<ISAPI normalizeRequest="true" safeHeaderNames="true">
 				<!--
 				Maps IIS Instance ID values to the host scheme/name/port/sslport. The name is
 				required so that the proper <Host> in the request map above is found without
diff --git a/schemas/shibboleth-targetconfig-1.0.xsd b/schemas/shibboleth-targetconfig-1.0.xsd
index f40ba61..8bf3002 100644
--- a/schemas/shibboleth-targetconfig-1.0.xsd
+++ b/schemas/shibboleth-targetconfig-1.0.xsd
@@ -7,7 +7,7 @@
 	elementFormDefault="qualified"
 	attributeFormDefault="unqualified"
 	blockDefault="substitution"
-	version="1.3.1">
+	version="1.3.2">
 
 	<import namespace="urn:oasis:names:tc:SAML:1.0:assertion" schemaLocation="cs-sstc-schema-assertion-1.1.xsd"/>
 	<import namespace="urn:oasis:names:tc:SAML:2.0:metadata" schemaLocation="saml-schema-metadata-2.0.xsd"/>
@@ -190,6 +190,7 @@
 		<attribute name="localRelayState" type="boolean" use="optional" default="false"/>
 		<attribute name="unsetHeaderValue" type="conf:string" use="optional"/>
 		<attribute name="checkSpoofing" type="boolean" use="optional"/>
+        <attribute name="spoofKey" type="conf:string" use="optional"/>
 		<attribute name="catchAll" type="boolean" use="optional"/>
 		<anyAttribute namespace="##other" processContents="lax"/>
 	</complexType>
@@ -212,6 +213,7 @@
 				<any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
 			</sequence>
 			<attribute name="normalizeRequest" type="boolean" use="optional"/>
+            <attribute name="safeHeaderNames" type="boolean" use="optional"/>
 			<anyAttribute namespace="##other" processContents="lax"/>
 		</complexType>
 	</element>

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-shibboleth/shibboleth-sp2.git



More information about the Pkg-shibboleth-devel mailing list