[JIRA] Updated: (SSPCPP-417) redirectErrors configuration attribute does not handle relative URLs

[Scott Cantor (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/SSPCPP-417?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor updated SSPCPP-417:
--------------------------------

     Affects Version/s: 2.4
                        2.4.1
                        2.4.2
         Fix Version/s: 2.5
      Operating System: Multiple  (was: Linux)
            Web Server: Multiple  (was: Apache 2.2)
    Remaining Estimate: 2 hours
     Original Estimate: 2 hours

> redirectErrors configuration attribute does not handle relative URLs
> --------------------------------------------------------------------
>
>                 Key: SSPCPP-417
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-417
>             Project: Shibboleth SP - C++
>          Issue Type: Bug
>          Components: Configuration, Error Handling
>    Affects Versions: 2.4, 2.4.1, 2.4.2, 2.4.3
>         Environment: CentOS 5.7, Shibboleth RPMs 2.4.3-2.2, Apache 2.2.3-53
>            Reporter: Terrence G Fleury
>            Assignee: Scott Cantor
>              Labels: Session
>             Fix For: 2.5
>
>   Original Estimate: 2 hours
>  Remaining Estimate: 2 hours
>
> Using documentation found at https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPErrors , I attempted to use the "redirectErrors" attribute with a relative URL. When using an absolute URL such as 'redirectErrors="https://example.org/script.php"', errors were redirected to the 'script.php' handler as expected. When using a relative URL such as 'redirectErrors="script.php"', errors were instead redirected to "https://example.org/Shibboleth.sso/SAML2/POST". I tried several variations such as "/script.php", "../script.php", "/../script.php", etc., but none of them worked. So either the documentation is incorrect (i.e. relative URLs are not allowed), or there is a bug in the code which handles relative URLs. 

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira