SP- Redirect to improper urls after setting value for redirectErrors

[Alexander Ivanov]

My apologies, the last email sent accidentally before I was finished
typing..

I did not get a chance to say that when an error redirect is triggered, the
user is sent to an improper url such as this:
https://stage.qdr.org/adaptive_image=1920;%20has_js=1;%20_check_is_passive=
https://dv.stage.qdr.org/_ga=GA1.2.1797399667.1474414075;%20_saml_idp=aHR0cHM6Ly9pZHAuc3RhZ2UucWRyLm9yZy9pZHAvc2hpYmJvbGV0aA%3D%3D;%20_gat=1;%20_check_is_passive_

The text appended to the url seems to be from the browser's cookie file.
It's interesting to note that this error seems to only occur with Firefox,
and in Firefox all cookies are stored in a single file according to the
Mozilla documentation.  It looks like the SP is tacking the contents of the
user's cookie file to the redirectErrors url

Has anyone else encountered this issue?  Is there a known fix?  I know I
can fix the re-direct on the application level, but it would be better if
the redirect to the improper url did not occur at all.

Thanks in advance for your help.

My Best,
Alex


On Sat, Jan 21, 2017 at 11:51 PM, Alexander Ivanov <alex at calmforce.com>
wrote:

> Hi all,
>
> We are running an SP configured for two applications (shibboleth2.xml file
> attached)
>
> I've recently added redirectErrors values to the configuration:
>
> <Errors ... redirectErrors="https://stage.qdr.org"/>
>
> And for the second application, inside the ApplicationOverride:
>
> <Errors ... redirectErrors="https://dv.stage.qdr.org"/>
>
>
> We are running an SP
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170122/eb51aeba/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: shibboleth2.xml
Type: text/xml
Size: 7026 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20170122/eb51aeba/attachment.xml>