- Aug 17, 2017
-
-
Thijs Kinkhorst authored
This reverts commit b9f92f33.
-
- Aug 15, 2017
-
-
Thijs Kinkhorst authored
-
Thijs Kinkhorst authored
-
Jaime Pérez Crespo authored
Provide OID mapping for sshPublicKey
-
Kristof Bajnok authored
-
Jaime Pérez Crespo authored
-
Jaime Pérez Crespo authored
-
manu0401 authored
I have been maintaining the PHP LDAP EXOP patch for a few years, which include the ldapwhoami() function. This has finally made its way into PHP distribution and will be available in PHP 7.3, but with a modified prototype. This changes adapts to this API change. While there, also update exception handling on par with recent SimpleSAMLphp code.
-
- Aug 14, 2017
-
-
Jan de Mooij authored
See issue #593 for a problem description. SimpleSamlPHP makes use of unsafe inline Javascript and CSS elements. Although most generated HTML uses SimpleSamlPHP's own headers, the keepPost option in an authentication request uses the headers of the PHP application it is sent from. This forces web applications using SimpleSamlPHP to allow 'unsafe-inline' in their Content Security Policy. This commit fixes this issue for the keepPost page ''only'', to allow PHP applications using SimpleSamlPHP to use a more strict Content Security Policy. This does not take away from possible XSS vulnerabilities in other parts of SimpleSamlPHP.
-
Jaime Pérez Crespo authored
ADFS-module: Set enctype on post-form
-
- Aug 13, 2017
-
-
Tim van Dijen authored
-
Tim van Dijen authored
Without proper enctype, every space in $wresult will be converted to a +
-
- Aug 11, 2017
-
-
Jaime Pérez Crespo authored
bugfix: Make the core:TargetedID authproc filter return also a NameID object instead of its string representation.
-
- Aug 10, 2017
-
-
Jaime Pérez Crespo authored
bugfix: NameIDs are created now as objects, so their information can't any longer be accessed as an array.
-
- Aug 09, 2017
-
-
Jaime Pérez Crespo authored
Fix XML validation failure with leading/trailing whitespace
-
Dick Visser authored
-
Jaime Pérez Crespo authored
Add missing 'required' value
-
- Aug 08, 2017
-
-
Tim van Dijen authored
Fixes: Aug 8 20:44:18 simplesamlphp-2 IDP-MOO[3845]: 3 [d01bee1f99] SimpleSAML_Error_Exception: Error 8 - Undefined index: required Aug 8 20:44:18 simplesamlphp-2 IDP-MOO[3845]: 3 [d01bee1f99] Backtrace: Aug 8 20:44:18 simplesamlphp-2 IDP-MOO[3845]: 3 [d01bee1f99] 4 /apps/simplesamlphp/simplesamlphp/www/_include.php:86 (SimpleSAML_error_handler) Aug 8 20:44:18 simplesamlphp-2 IDP-MOO[3845]: 3 [d01bee1f99] 3 /apps/simplesamlphp/simplesamlphp/modules/core/templates/frontpage_config.tpl.php:91 (require) Aug 8 20:44:18 simplesamlphp-2 IDP-MOO[3845]: 3 [d01bee1f99] 2 /apps/simplesamlphp/simplesamlphp/lib/SimpleSAML/XHTML/Template.php:405 (SimpleSAML_XHTML_Template::show) Aug 8 20:44:18 simplesamlphp-2 IDP-MOO[3845]: 3 [d01bee1f99] 1 /apps/simplesamlphp/simplesamlphp/modules/core/www/frontpage_config.php:198 (require) Aug 8 20:44:18 simplesamlphp-2 IDP-MOO[3845]: 3 [d01bee1f99] 0 /apps/simplesamlphp/simplesamlphp/www/module.php:135 (N/A)
-
Jaime Pérez Crespo authored
-
Jaime Pérez Crespo authored
Class name typo causes fatals on some pages
-
Jaime Pérez Crespo authored
-
- Aug 07, 2017
-
-
Greg Harvey authored
-
Greg Harvey authored
-
Jaime Pérez Crespo authored
-
Jaime Pérez Crespo authored
-
Jaime Pérez Crespo authored
-
Jaime Pérez Crespo authored
-
Jaime Pérez Crespo authored
-
- Aug 04, 2017
-
-
Thijs Kinkhorst authored
This would mean that any code using this helper function could not use the ldap.filter option. It's a followup to commit ff5497e9 which fixed this for the `login()` method but not for the `searchfordn()` method.
-
Jaime Pérez Crespo authored
added exception logging for federation lookups
-
Jaime Pérez Crespo authored
Be gentle with weird implementations that set $_SERVER['HTTPS'] to null.
-
Jaime Pérez Crespo authored
SAMLBuilder AttributeAuthorityDescriptor empty protocolSupportEnumeration
-
Jaime Pérez Crespo authored
-
Jaime Pérez Crespo authored
Remove sensitive data from logs during LDAP filters
-
- Aug 03, 2017
-
-
John Maguire authored
-
Jaime Pérez Crespo authored
This reverts commit 82a46a7c.
-
Jaime Pérez Crespo authored
This removes the dependency on mcrypt for good, closes #660 and resolves #615.
-
Jaime Pérez Crespo authored
We've just been moved from Precise to Trusty, and PHP 5.3 is not available in the latter, so builds fail.
-
Jaime Pérez Crespo authored
Otherwise, a theme would not be able to include/embed/extend its own templates.
-
Tim van Dijen authored
-