- Apr 29, 2020
-
-
Thijs Kinkhorst authored
These pages are now handled by the admin module. Add redirects to the new locations.
-
Thijs Kinkhorst authored
-
Thijs Kinkhorst authored
-
Tim van Dijen authored
-
Tim van Dijen authored
-
- Apr 17, 2020
- Apr 16, 2020
-
-
Olav Morken authored
If the file system containing the PHP code is case-insensitive, a request containing an uppercase file extension will return the contents of the PHP file to the browser instead of executing it. E.g. a request for this URL will return the source code: https:/sp.example.org/simplesaml/module.php/core/frontpage_welcome.PHP Fix that by converting the path to lowercase before checking the file extension. See the following page for details: https://github.com/simplesamlphp/simplesamlphp/security/advisories/GHSA-24m3-w8g9-jwpq
-
- Apr 15, 2020
-
-
Jaime Pérez Crespo authored
-
Jaime Pérez Crespo authored
This makes it possible for existing deployments to have this working with SSO. Otherwise, the user would end up authenticated with the "default" auth source when accessing the web interface, and "another" auth source when logging in via SAML.
-
Philipp Kolmann authored
Squashed commits: [090679e6b] authsources must be an array [1778d0c21] only set the AuthSource if it also exists, but always remove the config variable. [c09669e32] add the possibility to specify one AuthSource to be shown and the rest are used via multiauth:MultiAuth
-
- Apr 14, 2020
-
-
Aaron St. Clair authored
Issue #1272 - SSP refuses to use temp dir if it doesn't own it, even though it can write to it (#1314) * Issue #1272 - SSP refuses to use temp dir if it doesn't own it, even though it can write to it This has been addressed using the is_writable function instead of checking for UID, which only works in a Linux environment Co-authored-by:
Aaron St. Clair <astclair@ecrs.com>
-
- Apr 07, 2020
-
-
Tim van Dijen authored
-
- Apr 06, 2020
-
-
Jaime Perez authored
-
Jaime Perez authored
-
- Mar 31, 2020
-
-
Jaime Pérez Crespo authored
The callable must be called from the sendContent() method, rather than send(). Otherwise, sendHeaders() is never called.
-
Tim van Dijen authored
-
Tim van Dijen authored
-
- Mar 21, 2020
-
-
Tim van Dijen authored
-
- Mar 18, 2020
-
-
Jaime Pérez Crespo authored
They seem to cause trouble, also inconsistent behaviour between versions of the memcached extension.
-
Jaime Pérez Crespo authored
-
Jaime Pérez Crespo authored
-
Jaime Pérez Crespo authored
-
Jaime Pérez Crespo authored
This was available for the memcache extension, but when we moved to memcached it went away since the API is different and required changes. The issue with persitence in memcached is that persistent connections require a common identifier, which shouldn't be fixed. Therefore, we need to change a bit the way the memcache servers are configured in config.php as well.
-
- Mar 17, 2020
-
-
Tim van Dijen authored
-
- Mar 16, 2020
-
-
Tim van Dijen authored
-
Thijs Kinkhorst authored
-
Thijs Kinkhorst authored
-
- Mar 15, 2020
-
-
dependabot[bot] authored
Bumps [acorn](https://github.com/acornjs/acorn) from 6.3.0 to 6.4.1. - [Release notes](https://github.com/acornjs/acorn/releases) - [Commits](https://github.com/acornjs/acorn/compare/6.3.0...6.4.1 ) Signed-off-by:
dependabot[bot] <support@github.com> Co-authored-by:
dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
- Mar 06, 2020
-
-
Tim van Dijen authored
-
- Mar 05, 2020
-
-
Tim van Dijen authored
-
Tim van Dijen authored
-
Tim van Dijen authored
-
Thijs Kinkhorst authored
-
- Feb 29, 2020
-
-
Tim van Dijen authored
-
- Feb 26, 2020
-
-
Tim van Dijen authored
-
José Manuel Macías Luna authored
-
- Feb 25, 2020
-
-
Philipp Kolmann authored
-
Pavel Břoušek authored
-
Tim van Dijen authored
-
Rosemary Orchard authored
-