[cpp-sp] branch main updated: Guard POST body preservation with method check.
Codeberg
noreply at shibboleth.net
Tue Jan 13 13:38:43 UTC 2026
This is an automated email from the git hooks/post-receive script.
codeberg pushed a commit to branch main
in repository cpp-sp.
View the commit online:
https://codeberg.org/Shibboleth/cpp-sp/commit/d0fa62a90de3517334f99462e681308678131257
The following commit(s) were added to refs/heads/main by this push:
new d0fa62a9 Guard POST body preservation with method check.
d0fa62a9 is described below
commit d0fa62a90de3517334f99462e681308678131257
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Jan 13 08:38:08 2026 -0500
Guard POST body preservation with method check.
---
shibsp/handler/impl/AbstractHandler.cpp | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/shibsp/handler/impl/AbstractHandler.cpp b/shibsp/handler/impl/AbstractHandler.cpp
index 4dc1852e..055a28cf 100644
--- a/shibsp/handler/impl/AbstractHandler.cpp
+++ b/shibsp/handler/impl/AbstractHandler.cpp
@@ -128,7 +128,7 @@ DDF AbstractHandler::wrapRequest(const SPRequest& request, const set<string>& he
in.addmember("hostname").unsafe_string(request.getHostname());
in.addmember("port").integer(request.getPort());
in.addmember("content_type").string(request.getContentType().c_str());
- if (sendBody) {
+ if (sendBody && !strcmp(request.getMethod(), "POST")) {
if (request.getContentType().find("application/x-www-form-urlencoded") != string::npos) {
unsigned int postLimit = getUnsignedInt(RequestMapper::POST_LIMIT_PROP_NAME, request,
RequestMapper::POST_LIMIT_PROP_DEFAULT, HANDLER_PROPERTY_FIXED | HANDLER_PROPERTY_MAP);
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list