[JIRA] (JSSH-31) AttributeSupport value to QName conversion mishandles illegal values

Scott Cantor (Jira) jira at shibboleth.atlassian.net
Thu May 4 14:16:32 UTC 2023


Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *created* an issue

Shibboleth Shared - Java ( https://shibboleth.atlassian.net/browse/JSSH?atlOrigin=eyJpIjoiY2U1NTU5NDk0ZDA0NDRlMWExNDIwNGYxMzUzOGRmYzMiLCJwIjoiaiJ9 ) / Bug ( https://shibboleth.atlassian.net/browse/JSSH-31?atlOrigin=eyJpIjoiY2U1NTU5NDk0ZDA0NDRlMWExNDIwNGYxMzUzOGRmYzMiLCJwIjoiaiJ9 ) JSSH-31 ( https://shibboleth.atlassian.net/browse/JSSH-31?atlOrigin=eyJpIjoiY2U1NTU5NDk0ZDA0NDRlMWExNDIwNGYxMzUzOGRmYzMiLCJwIjoiaiJ9 ) AttributeSupport value to QName conversion mishandles illegal values ( https://shibboleth.atlassian.net/browse/JSSH-31?atlOrigin=eyJpIjoiY2U1NTU5NDk0ZDA0NDRlMWExNDIwNGYxMzUzOGRmYzMiLCJwIjoiaiJ9 )

Issue Type: Bug Assignee: Unassigned Components: General Created: 04/May/23 10:16 AM Fix Versions: 9.0.0 Priority: Trivial Reporter: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 )

The getAttributeValueAsQName was ignoring multiple colons and just truncating the value at the second one. The XML QName rules disallow colons in the name, so the returned object isn’t illegal but it just silently ignores the rest of the string. We should raise an exception in this case.

( https://shibboleth.atlassian.net/browse/JSSH-31#add-comment?atlOrigin=eyJpIjoiY2U1NTU5NDk0ZDA0NDRlMWExNDIwNGYxMzUzOGRmYzMiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JSSH-31#add-comment?atlOrigin=eyJpIjoiY2U1NTU5NDk0ZDA0NDRlMWExNDIwNGYxMzUzOGRmYzMiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100225- sha1:f83bc8f )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230504/0111787a/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-0c893451-a54f-433a-8718-a5ad51f95915
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230504/0111787a/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-c6a5c6f4-c146-48f3-87d7-42b651afbc09
Type: image/png
Size: 446 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230504/0111787a/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-159de32d-e6da-45e2-bdd4-c15848c6ef2c
Type: image/png
Size: 345 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230504/0111787a/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-77ae2afc-814f-4cb9-8b95-e74bf1972bd5
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230504/0111787a/attachment-0007.png>


More information about the commits mailing list