[java-identity-provider] branch master updated: OSJ-317 - Tighten Metadata schema to disallow empty elements.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=23ff974456560a71bbcf3aa81ef2fa9bc29db57e

The following commit(s) were added to refs/heads/master by this push:
       new  23ff97445 OSJ-317 - Tighten Metadata schema to disallow empty elements.
23ff97445 is described below

commit 23ff974456560a71bbcf3aa81ef2fa9bc29db57e
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Mon Jun 8 20:38:46 2020 -0400

    OSJ-317 - Tighten Metadata schema to disallow empty elements.
    
    https://issues.shibboleth.net/jira/browse/OSJ-317
    
    Add property to enable strict schemas.
---
 idp-conf/src/main/resources/system/conf/global-system.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/idp-conf/src/main/resources/system/conf/global-system.xml b/idp-conf/src/main/resources/system/conf/global-system.xml
index a1c9cd3df..a8d028e95 100644
--- a/idp-conf/src/main/resources/system/conf/global-system.xml
+++ b/idp-conf/src/main/resources/system/conf/global-system.xml
@@ -131,7 +131,7 @@
 
     <!--  Bean used by the SchemaValidation metadata filter and anything else doing basic schema validation. -->
     <bean id="shibboleth.SchemaBuilder" lazy-init="true"
-        class="org.opensaml.saml.common.xml.SAMLSchemaBuilder" c:ver="SAML_11" >
+        class="org.opensaml.saml.common.xml.SAMLSchemaBuilder" c:ver="SAML_11" c:strict="%{idp.schemaValidation.strict:false}">
         <property name="schemaBuilder">
             <bean class="net.shibboleth.utilities.java.support.xml.SchemaBuilder">
                 <property name="resourceResolver">

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.