[shibboleth-sp2] 21/25: Adding header sanitizing option.
Ferenc Wágner
wferi-guest at moszumanska.debian.org
Tue Jan 26 21:30:04 UTC 2016
This is an automated email from the git hooks/post-receive script.
wferi-guest pushed a commit to annotated tag 1.3.2
in repository shibboleth-sp2.
commit 5aa554a135d739acca10e8668ccc0471156bfec2
Author: Scott Cantor <cantor.2 at osu.edu>
Date: Sat Jun 13 03:55:47 2009 +0000
Adding header sanitizing option.
---
configs/shibboleth.xml.in | 2 +-
schemas/shibboleth-targetconfig-1.0.xsd | 4 +++-
2 files changed, 4 insertions(+), 2 deletions(-)
diff --git a/configs/shibboleth.xml.in b/configs/shibboleth.xml.in
index 8989b82..76430a1 100644
--- a/configs/shibboleth.xml.in
+++ b/configs/shibboleth.xml.in
@@ -81,7 +81,7 @@
</RequestMapProvider>
<Implementation>
- <ISAPI normalizeRequest="true">
+ <ISAPI normalizeRequest="true" safeHeaderNames="true">
<!--
Maps IIS Instance ID values to the host scheme/name/port/sslport. The name is
required so that the proper <Host> in the request map above is found without
diff --git a/schemas/shibboleth-targetconfig-1.0.xsd b/schemas/shibboleth-targetconfig-1.0.xsd
index f40ba61..8bf3002 100644
--- a/schemas/shibboleth-targetconfig-1.0.xsd
+++ b/schemas/shibboleth-targetconfig-1.0.xsd
@@ -7,7 +7,7 @@
elementFormDefault="qualified"
attributeFormDefault="unqualified"
blockDefault="substitution"
- version="1.3.1">
+ version="1.3.2">
<import namespace="urn:oasis:names:tc:SAML:1.0:assertion" schemaLocation="cs-sstc-schema-assertion-1.1.xsd"/>
<import namespace="urn:oasis:names:tc:SAML:2.0:metadata" schemaLocation="saml-schema-metadata-2.0.xsd"/>
@@ -190,6 +190,7 @@
<attribute name="localRelayState" type="boolean" use="optional" default="false"/>
<attribute name="unsetHeaderValue" type="conf:string" use="optional"/>
<attribute name="checkSpoofing" type="boolean" use="optional"/>
+ <attribute name="spoofKey" type="conf:string" use="optional"/>
<attribute name="catchAll" type="boolean" use="optional"/>
<anyAttribute namespace="##other" processContents="lax"/>
</complexType>
@@ -212,6 +213,7 @@
<any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
</sequence>
<attribute name="normalizeRequest" type="boolean" use="optional"/>
+ <attribute name="safeHeaderNames" type="boolean" use="optional"/>
<anyAttribute namespace="##other" processContents="lax"/>
</complexType>
</element>
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-shibboleth/shibboleth-sp2.git
More information about the Pkg-shibboleth-devel
mailing list