[java-identity-provider] 01/02: OSJ-427: Simple signature verification fails to detect parameter ...

[Brent Putman]

This is an automated email from the git hooks/post-receive script.

putmanb pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=7be15605489c023f808d2db4c2a900ca024f1c40

commit 7be15605489c023f808d2db4c2a900ca024f1c40
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Fri Mar 21 14:54:37 2025 -0400

    OSJ-427: Simple signature verification fails to detect parameter ...
    
    Make HTTP request validation for SOAP a no-op.
---
 .../shibboleth/idp/conf/saml-binding-config.xml    | 30 ++--------------------
 1 file changed, 2 insertions(+), 28 deletions(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-binding-config.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-binding-config.xml
index 827fe8957..4b4bd4005 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-binding-config.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-binding-config.xml
@@ -274,36 +274,10 @@
     </bean>
     
     <bean id="shibboleth.HttpServletRequestValidator.BasicParams.SAML2.SOAP11"
-          parent="shibboleth.HttpServletRequestValidator.BasicParams.SAML.Abstract">
-        <property name="requiredParameters">
-            <set>
-            </set>
-        </property>
-        <property name="uniqueParameters">
-            <set>
-            </set>
-        </property>
-        <property name="mutuallyExclusiveParameters">
-            <set>
-            </set>
-        </property>
-    </bean>
+          class="net.shibboleth.shared.servlet.impl.NoOpHttpServletRequestValidator" />
     
     <bean id="shibboleth.HttpServletRequestValidator.BasicParams.SAML1.SOAP11"
-          parent="shibboleth.HttpServletRequestValidator.BasicParams.SAML.Abstract">
-        <property name="requiredParameters">
-            <set>
-            </set>
-        </property>
-        <property name="uniqueParameters">
-            <set>
-            </set>
-        </property>
-        <property name="mutuallyExclusiveParameters">
-            <set>
-            </set>
-        </property>
-    </bean>
+          class="net.shibboleth.shared.servlet.impl.NoOpHttpServletRequestValidator" />
     
     <bean id="shibboleth.HttpServletRequestValidator.BasicParams.SAML.IdPInitiated"
           parent="shibboleth.HttpServletRequestValidator.BasicParams.SAML.Abstract">

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.