Firefox 108 issues with IDP 4.x w/ strict CSP

Wed Dec 21 14:55:41 UTC 2022

(But are, of course, overrideable.)

-- Scott

On 12/21/22, 9:54 AM, "users on behalf of Cantor, Scott via users" <users-bounces at shibboleth.net <mailto:users-bounces at shibboleth.net> on behalf of users at shibboleth.net <mailto:users at shibboleth.net>> wrote:

> The offending line of code is <body
> onLoad="document.forms[0].submit()"> which is found in the binding
> templates in both the SP and in IDP 4.x (not IDP 5.x).

They are certainly still there in V5.

-- Scott

-- 
For Consortium Member technical support, see <a href="https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!KGKeukY!1mNpOjbRSKLkndJ6Qtlig1sPmTj6RYT_LQ7Gz9PBHjxsqp9UPu_yTP5P9iCvRN3vTyq4I23n-cdR5H9xBw$ <https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!KGKeukY!1mNpOjbRSKLkndJ6Qtlig1sPmTj6RYT_LQ7Gz9PBHjxsqp9UPu_yTP5P9iCvRN3vTyq4I23n-cdR5H9xBw$>">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a> <https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a>>
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net <mailto:users-unsubscribe at shibboleth.net>