[java-identity-provider] 01/02: OSJ-427: Simple signature verification fails to detect parameter ...
Brent Putman
putmanb at georgetown.edu
Fri Mar 21 19:16:12 UTC 2025
This is an automated email from the git hooks/post-receive script.
putmanb pushed a commit to branch maint-5.1
in repository java-identity-provider.
View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=15eca653cc422a18f73d3012d37258cfaca94bbc
commit 15eca653cc422a18f73d3012d37258cfaca94bbc
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Fri Mar 21 14:54:37 2025 -0400
OSJ-427: Simple signature verification fails to detect parameter ...
Make HTTP request validation for SOAP a no-op.
---
.../shibboleth/idp/conf/saml-binding-config.xml | 30 ++--------------------
1 file changed, 2 insertions(+), 28 deletions(-)
diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-binding-config.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-binding-config.xml
index 827fe8957..4b4bd4005 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-binding-config.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-binding-config.xml
@@ -274,36 +274,10 @@
</bean>
<bean id="shibboleth.HttpServletRequestValidator.BasicParams.SAML2.SOAP11"
- parent="shibboleth.HttpServletRequestValidator.BasicParams.SAML.Abstract">
- <property name="requiredParameters">
- <set>
- </set>
- </property>
- <property name="uniqueParameters">
- <set>
- </set>
- </property>
- <property name="mutuallyExclusiveParameters">
- <set>
- </set>
- </property>
- </bean>
+ class="net.shibboleth.shared.servlet.impl.NoOpHttpServletRequestValidator" />
<bean id="shibboleth.HttpServletRequestValidator.BasicParams.SAML1.SOAP11"
- parent="shibboleth.HttpServletRequestValidator.BasicParams.SAML.Abstract">
- <property name="requiredParameters">
- <set>
- </set>
- </property>
- <property name="uniqueParameters">
- <set>
- </set>
- </property>
- <property name="mutuallyExclusiveParameters">
- <set>
- </set>
- </property>
- </bean>
+ class="net.shibboleth.shared.servlet.impl.NoOpHttpServletRequestValidator" />
<bean id="shibboleth.HttpServletRequestValidator.BasicParams.SAML.IdPInitiated"
parent="shibboleth.HttpServletRequestValidator.BasicParams.SAML.Abstract">
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list