Shibboleth Service Provider Security Advisory [4 May 2016]
takeshi at nii.ac.jp
Thu May 5 23:55:45 EDT 2016
> Restarting the web server will not be required to effect the change.
Though it may already be clear by the word "the web server", shibd as well as httpd does not seem to be required to be restarted.
> 2016/05/05 1:20、Cantor, Scott <cantor.2 at osu.edu> wrote:
>> Just to clarify. If the <PathRegex> feature is not in shibboleth2.xml, should it
>> be added with add ignoreCase="false"? I wasn't sure.
> Quoting the advisory:
>> Deployers that do _not_ make use of the <PathRegex> feature are _not_
> -- Scott
More information about the users