[cpp-sp] branch main updated: Backstop unwrapped redirects with sanity checks.

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository cpp-sp.

View the commit online:
https://codeberg.org/Shibboleth/cpp-sp/commit/1e711bc1fce8f50a833c245584ae19e67547f0ce

The following commit(s) were added to refs/heads/main by this push:
     new 1e711bc1 Backstop unwrapped redirects with sanity checks.
1e711bc1 is described below

commit 1e711bc1fce8f50a833c245584ae19e67547f0ce
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Thu Dec 4 17:05:46 2025 -0500

    Backstop unwrapped redirects with sanity checks.
---
 shibsp/handler/impl/AbstractHandler.cpp | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/shibsp/handler/impl/AbstractHandler.cpp b/shibsp/handler/impl/AbstractHandler.cpp
index 3a57d2b7..16f7eafe 100644
--- a/shibsp/handler/impl/AbstractHandler.cpp
+++ b/shibsp/handler/impl/AbstractHandler.cpp
@@ -180,7 +180,10 @@ pair<bool,long> AbstractHandler::unwrapResponse(SPRequest& request, DDF& wrapped
 
     h = http["redirect"];
     if (h.isstring()) {
-        return make_pair(true, request.sendRedirect(h.string()));
+        request.limitRedirect(h.string());
+        string dest(h.string());
+        request.absolutize(dest);
+        return make_pair(true, request.sendRedirect(dest.c_str()));
     }
 
     h = http["response"];

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.