Shibboleth Service Provider Security Advisory [4 May 2016]

Cantor, Scott cantor.2 at osu.edu
Wed May 4 12:20:41 EDT 2016


> Just to clarify.  If the <PathRegex> feature is not in shibboleth2.xml, should it
> be added with add ignoreCase="false"?  I wasn't sure.

Quoting the advisory:

> Deployers that do _not_ make use of the <PathRegex> feature are _not_
> impacted.

-- Scott



More information about the users mailing list