[cpp-sp] branch master updated: Copy redirect hardening change to Windows/example configs.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository cpp-sp.

View the commit online:
http://git.shibboleth.net/view/?p=cpp-sp.git;a=commit;h=e43ae3cb77e7cad026bb3a6f64bd273061e389c0

The following commit(s) were added to refs/heads/master by this push:
       new  e43ae3c   Copy redirect hardening change to Windows/example configs.
e43ae3c is described below

commit e43ae3cb77e7cad026bb3a6f64bd273061e389c0
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Mon Mar 30 09:23:57 2020 -0400

    Copy redirect hardening change to Windows/example configs.
---
 configs/example-shibboleth2.xml | 1 +
 configs/win-shibboleth2.xml     | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/configs/example-shibboleth2.xml b/configs/example-shibboleth2.xml
index 378ed71..3d481e5 100644
--- a/configs/example-shibboleth2.xml
+++ b/configs/example-shibboleth2.xml
@@ -101,6 +101,7 @@
         -->
         <Sessions lifetime="28800" timeout="3600" checkAddress="false"
             handlerURL="/Shibboleth.sso" handlerSSL="false" cookieProps="http" relayState="ss:mem"
+            redirectLimit="exact"
             exportLocation="http://localhost/Shibboleth.sso/GetAssertion" exportACL="127.0.0.1"
             idpHistory="false" idpHistoryDays="7">
 
diff --git a/configs/win-shibboleth2.xml b/configs/win-shibboleth2.xml
index ededa10..50384ad 100644
--- a/configs/win-shibboleth2.xml
+++ b/configs/win-shibboleth2.xml
@@ -72,7 +72,8 @@
         "false", this makes an assertion stolen in transit easier for attackers to misuse.
         -->
         <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
-                  checkAddress="false" handlerSSL="false" cookieProps="http">
+                  checkAddress="false" handlerSSL="false" cookieProps="http"
+                  redirectLimit="exact">
 
             <!--
             Configures SSO for a default IdP. To properly allow for >1 IdP, remove

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.