[java-idp-plugin-oidc-rp] branch main updated: JOIDCRP-49 - Add CSP protection to views

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-oidc-rp.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-rp.git;a=commit;h=54ecc7acc0d01495e674e12c35d9217781a8958c

The following commit(s) were added to refs/heads/main by this push:
     new 54ecc7a  JOIDCRP-49 - Add CSP protection to views
54ecc7a is described below

commit 54ecc7acc0d01495e674e12c35d9217781a8958c
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Fri Apr 5 14:57:28 2024 +0100

    JOIDCRP-49 - Add CSP protection to views
    
      - Fix bean wiring
    
    https://shibboleth.atlassian.net/browse/JOIDCRP-49
---
 .../flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml b/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml
index 41119ae..bf24085 100644
--- a/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml
+++ b/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml
@@ -257,8 +257,8 @@
         class="net.shibboleth.oidc.profile.encoding.impl.HTTPPostAuthnRequestEncoder" init-method="" scope="prototype"
         p:velocityEngine-ref="shibboleth.VelocityEngine" p:httpServletResponseSupplier-ref="shibboleth.HttpServletResponseSupplier"
         p:authorizationParamsAreValidPredicate="#{getObject('shibboleth.authn.oidc.rp.AuthzParamsValidPredicate')}" 
-        p:cSPDigester-ref="#{%{idp.encoders.cspEnabled:true} ? getObject('RPCSPDigester') : null} "
-        p:cSPNonceGenerator-ref="#{%{idp.encoders.cspEnabled:true} ? getObject('RPCSPNonce') : null}"/>
+        p:cSPDigester="#{%{idp.encoders.cspEnabled:true} ? getObject('RPCSPDigester') : null}"
+        p:cSPNonceGenerator="#{%{idp.encoders.cspEnabled:true} ? getObject('RPCSPNonce') : null}"/>
 
     <bean id="EncodeMessage" class="org.opensaml.profile.action.impl.EncodeMessage" scope="prototype"
         p:messageEncoderFactory-ref="messageEncoderFactory" p:httpServletResponseSupplier-ref="shibboleth.HttpServletResponseSupplier" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.