[java-identity-provider] branch main updated: IDP-1934 - Logout completion view missing CSRF exclusion.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=cc5b97447c0804ffc44bd6038c7881729b16e4ae

The following commit(s) were added to refs/heads/main by this push:
     new cc5b97447 IDP-1934 - Logout completion view missing CSRF exclusion.
cc5b97447 is described below

commit cc5b97447c0804ffc44bd6038c7881729b16e4ae
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Apr 5 11:56:10 2022 -0400

    IDP-1934 - Logout completion view missing CSRF exclusion.
    
    https://shibboleth.atlassian.net/browse/IDP-1934
---
 .../net/shibboleth/idp/flows/saml/saml2/slo-front-abstract-flow.xml      | 1 +
 1 file changed, 1 insertion(+)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml2/slo-front-abstract-flow.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml2/slo-front-abstract-flow.xml
index b97b98603..cd30a51e9 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml2/slo-front-abstract-flow.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml2/slo-front-abstract-flow.xml
@@ -182,6 +182,7 @@
     </view-state>
 
     <view-state id="LogoutCompleteView" view="logout-complete">
+        <attribute name="csrf_excluded" value="true" type="boolean"/>
         <on-render>
             <evaluate expression="environment" result="viewScope.environment" />
             <evaluate expression="opensamlProfileRequestContext" result="viewScope.profileRequestContext" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.