Limitations on attribute names from IIS to Tomcat?

Robert Lowe robertmlowe at rmlowe.com
Wed Apr 4 06:27:40 EDT 2018


> Any SP managed headers are collapsed to eliminate hyphens by default
> before it ever gets there because hyphens introduce security risks
> depending on an incredibly complex array of API issues.
>

Thanks Scott.

Does this apply to other non-alphanumeric characters too? What would happen
to underscores for example?

-- 
Best regards,

Robert Lowe
http://crepuscular.rmlowe.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180404/9d407c12/attachment.html>


More information about the users mailing list