Recent Safari update breaks some SPs ?

[Losen, Stephen C. (scl)]

Hi,

I am blaming Safari because 1) my supervisor had no trouble with Safari yesterday, but it broke today after he ran the MacOS update.  2) When we use other browsers to connect to the Service Now SP we can see in the IDP httpd logs very similar GET requests, except that the Safari requests that fail have https:// instead of https%3A%2F%2F.

And now looking closer, I see that the entire query string from Safari has literal /s instead of %2F and literal : instead of %3A.

To see if Safari is indeed changing the query string we'll need to trace the session on Safari.

I was just hoping that others have seen this problem and know the reason, since I'm not particularly motivated to debug Safari.

Stephen C. Losen
ITS - Systems and Storage
University of Virginia
scl at virginia.edu    434-924-0640

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, October 25, 2016 4:23 PM
To: Shib Users
Subject: RE: Recent Safari update breaks some SPs ?

> And in the query string is &RelayState= ...  In the requests that fail, the URL
> begins with https://... while in requests that work properly the URL is
> encoded with https%3A%2F%2F...
> 
> So it looks like Safari is decoding part of the query string that it should be
> leaving alone.

That seems pretty eggregious to be a Safari bug. Are you sure the issue isn't with the source system producing the redirect? That particular source system isn't known for robustness.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net