<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 2/1/17 3:21 PM, Cantor, Scott wrote:<br>
</div>
<blockquote cite="mid:8FB118A5-7448-4BB0-867F-7BE065857107@osu.edu"
type="cite">
<pre wrap="">On 2/1/17, 3:11 PM, "users on behalf of Jim Fox" <a class="moz-txt-link-rfc2396E" href="mailto:users-bounces@shibboleth.netonbehalfoffox@washington.edu"><users-bounces@shibboleth.net on behalf of fox@washington.edu></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Can I 'unfix' it? This a very importand SP, over which we have little control.
</pre>
</blockquote>
<pre wrap="">
Not really, it's baked in and is a basic SAML rule.</pre>
</blockquote>
<br>
Yeah. For the record it was
<a class="moz-txt-link-freetext" href="https://issues.shibboleth.net/jira/browse/OSJ-166">https://issues.shibboleth.net/jira/browse/OSJ-166</a> . There is some
small discussion there.<br>
<br>
<blockquote cite="mid:8FB118A5-7448-4BB0-867F-7BE065857107@osu.edu"
type="cite">
<pre wrap=""> Any SP violating it is probably just sending a standard POST binding request and you'd generally fix it by pointing it to /POST instead.</pre>
</blockquote>
<br>
Well, maybe. It it was genuinely POST it wouldn't be DEFLATEd. I
don't know off-hand if you attempt to DEFLATE data that isn't.
Maybe it's just a no-op.<br>
<br>
<blockquote cite="mid:8FB118A5-7448-4BB0-867F-7BE065857107@osu.edu"
type="cite">
<pre wrap="">
The only workaround I can think of would be a Java filter to blindly override the method the container sees for requests to that URL. You would have to do very ugly work to conditionalize that based on the SP and I probably wouldn't.
</pre>
</blockquote>
<br>
Maybe that would work... But, yuck.<br>
</body>
</html>