]> git.koha-community.org Git - koha.git/commit
Bug 23042: Only include GET params in return URL for Shibboleth
authorMartin Renvoize <martin.renvoize@ptfs-europe.com>
Thu, 13 Jun 2019 16:02:33 +0000 (17:02 +0100)
committerMartin Renvoize <martin.renvoize@ptfs-europe.com>
Fri, 22 Nov 2019 10:35:06 +0000 (10:35 +0000)
commit4beb1bf8e75dfee11c613c860e51b9237f271552
treea4742867b5237686ea9cb2b5a55a1393164c9bd3
parent5b7d43d4bd56143dde0d0089cd4ee62e4eb3e6f6
Bug 23042: Only include GET params in return URL for Shibboleth

The shibboleth return target included POST parameters in the URL string,
this meant that a failed local login POST would include the username and
password used in the attemtped login in plaintext in the redirect URL
that is appended to the shibboleth login URL.

Signed-off-by: Mark Tompsett <mtompset@hotmail.com>
Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
C4/Auth_with_shibboleth.pm