dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Set form-action for SAML Discovery Protocol URL (#1478)

Browse Source
This commit is contained in:
Clément OUDOT 2018-10-12 10:11:51 +02:00
parent c5f9a7f95b
commit 13320e64a9
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Run.pm
View File

@ -754,6 +754,17 @@ sub sendHtml {
"Set CSP form-action with request URL: " . $req->{cspFormAction} );
$csp .= " " . $req->{cspFormAction};
}
# Set SAML Discovery Protocol in form-action
# See https://github.com/w3c/webappsec-csp/issues/8
if ( $self->conf->{samlDiscoveryProtocolActivation}
and defined $self->conf->{samlDiscoveryProtocolURL} )
{
$self->logger->debug(
"Add SAML Discovery Protocol URL in CSP form-action");
$csp .= " " . $self->conf->{samlDiscoveryProtocolURL};
}
$csp .= ';';
# Deny using portal in frame except if it is required