[java-plugin-shibd-saml] branch main updated: Add parameter validation to SAML token consumer flows.

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-plugin-shibd-saml.

View the commit online:
https://codeberg.org/Shibboleth/java-plugin-shibd-saml/commit/188ca800598c9bbc4857cce2c07fc49e6f9d2c62

The following commit(s) were added to refs/heads/main by this push:
     new 188ca80  Add parameter validation to SAML token consumer flows.
188ca80 is described below

commit 188ca800598c9bbc4857cce2c07fc49e6f9d2c62
Author: Scott Cantor <scott at restingparrotsoftware.com>
AuthorDate: Thu May 21 12:58:43 2026 -0400

    Add parameter validation to SAML token consumer flows.
---
 .../net/shibboleth/idp/flows/sp/consumer/saml2/saml2-flow.xml        | 1 +
 .../META-INF/net/shibboleth/idp/flows/sp/saml2-common-beans.xml      | 5 +++++
 2 files changed, 6 insertions(+)

diff --git a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-flow.xml b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-flow.xml
index 1a05992..158d578 100644
--- a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-flow.xml
+++ b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-flow.xml
@@ -5,6 +5,7 @@
 
     <action-state id="DoProfileWork">
 <!--        <evaluate expression="PopulateMetricContext" />-->
+        <evaluate expression="ValidateHttpServletRequest" />
         <evaluate expression="DecodeMessage" />
 <!--        <evaluate expression="PostDecodePopulateAuditContext" />-->
 
diff --git a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/saml2-common-beans.xml b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/saml2-common-beans.xml
index d4e87f9..9b4378c 100644
--- a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/saml2-common-beans.xml
+++ b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/saml2-common-beans.xml
@@ -7,6 +7,11 @@
                            http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd"
     default-init-method="initialize" default-destroy-method="destroy">
 
+    <bean id="ValidateHttpServletRequest" class="net.shibboleth.sp.profile.impl.ValidateHttpServletRequest" scope="prototype"
+        p:httpServletRequestSupplier-ref="shibboleth.RemotedHttpServletRequestSupplier"
+        p:checkDuringInit="false"
+        p:validator="#{getObject('shibboleth.HttpServletRequestValidator') ?: null}" />
+
     <bean id="WebFlowInboundMessageHandlerAdaptor"
         class="net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor" scope="prototype" abstract="true"
         c:executionDirection="INBOUND" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.