]> git.koha-community.org Git - koha.git/commit
Bug 23042: Only include GET params in return URL for Shibboleth
authorMartin Renvoize <martin.renvoize@ptfs-europe.com>
Thu, 13 Jun 2019 16:02:33 +0000 (17:02 +0100)
committerMartin Renvoize <martin.renvoize@ptfs-europe.com>
Wed, 27 Nov 2019 11:30:20 +0000 (11:30 +0000)
commit4e02adb5dfee46aacadc74a054da26d0de83a73a
tree11da686f4db840e572741143858d51c9122994a5
parentd93f17bfaa13988fadc745cf5f6b3e6b479adcff
Bug 23042: Only include GET params in return URL for Shibboleth

The shibboleth return target included POST parameters in the URL string,
this meant that a failed local login POST would include the username and
password used in the attemtped login in plaintext in the redirect URL
that is appended to the shibboleth login URL.

Signed-off-by: Mark Tompsett <mtompset@hotmail.com>
Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
C4/Auth_with_shibboleth.pm