[cpp-sp] 02/02: Default new installs to strict redirects.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository cpp-sp.

View the commit online:
http://git.shibboleth.net/view/?p=cpp-sp.git;a=commit;h=dad4c2c8c7167490e498c96edea306d51d41f964

commit dad4c2c8c7167490e498c96edea306d51d41f964
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Mar 10 08:57:37 2020 -0400

    Default new installs to strict redirects.
---
 configs/shibboleth2.xml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/configs/shibboleth2.xml b/configs/shibboleth2.xml
index 30e951a..001031b 100644
--- a/configs/shibboleth2.xml
+++ b/configs/shibboleth2.xml
@@ -23,7 +23,8 @@
         "false", this makes an assertion stolen in transit easier for attackers to misuse.
         -->
         <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
-                  checkAddress="false" handlerSSL="false" cookieProps="http">
+                  checkAddress="false" handlerSSL="false" cookieProps="http"
+                  redirectLimit="exact">
 
             <!--
             Configures SSO for a default IdP. To properly allow for >1 IdP, remove

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.