[JIRA] (IDP-2051) Eliminate all remote schema imports in embedded schemas

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *created* an issue

Identity Provider ( https://shibboleth.atlassian.net/browse/IDP?atlOrigin=eyJpIjoiMGIwNDA2MDIwMGE1NDFmNTg2NjI0MTBhYzRjYmY3M2IiLCJwIjoiaiJ9 ) / Bug ( https://shibboleth.atlassian.net/browse/IDP-2051?atlOrigin=eyJpIjoiMGIwNDA2MDIwMGE1NDFmNTg2NjI0MTBhYzRjYmY3M2IiLCJwIjoiaiJ9 ) IDP-2051 ( https://shibboleth.atlassian.net/browse/IDP-2051?atlOrigin=eyJpIjoiMGIwNDA2MDIwMGE1NDFmNTg2NjI0MTBhYzRjYmY3M2IiLCJwIjoiaiJ9 ) Eliminate all remote schema imports in embedded schemas ( https://shibboleth.atlassian.net/browse/IDP-2051?atlOrigin=eyJpIjoiMGIwNDA2MDIwMGE1NDFmNTg2NjI0MTBhYzRjYmY3M2IiLCJwIjoiaiJ9 )

Issue Type: Bug Affects Versions: 4.0.0, 4.0.1, 4.1.0, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.1.6, 4.1.7, 4.2.0, 4.2.1 Assignee: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) Components: Configuration Created: 08/Dec/22 2:51 PM Fix Versions: 4.3.0 Priority: Trivial Reporter: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 )

Given Spring isn’t likely to consider their remotely capable entity resolution on imported schemas a bug, their position will be that it’s our fault for allowing URLs into our “trusted” XML. We should therefore change all the schemas to rely on locally overridden locations we can trap in the handler mappings and ensure that no accidents occur on them. We have hardened this, but there’s no guarantee.

( https://shibboleth.atlassian.net/browse/IDP-2051#add-comment?atlOrigin=eyJpIjoiMGIwNDA2MDIwMGE1NDFmNTg2NjI0MTBhYzRjYmY3M2IiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-2051#add-comment?atlOrigin=eyJpIjoiMGIwNDA2MDIwMGE1NDFmNTg2NjI0MTBhYzRjYmY3M2IiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100212- sha1:8cdcfbb )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20221208/3ada08ca/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-91e05c83-87d2-4fdd-9901-5ada2dd906c2
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221208/3ada08ca/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-4db68a6f-1dae-45fe-ba95-c24830d055ff
Type: image/png
Size: 446 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221208/3ada08ca/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-96a6a687-2858-4592-93af-c8ec47f0bdc1
Type: image/png
Size: 345 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221208/3ada08ca/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-a6572a97-9001-4944-aa3b-b02ad4707074
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221208/3ada08ca/attachment-0007.png>