SU-SWS / stanford_ssp

Drupal module for configuring SimpleSAMLphp in Stanford web environments
GNU General Public License v2.0
9 stars 8 forks source link

HSD8-1027 Pass query parameters after loggin in via saml #109

Closed pookmish closed 3 years ago

pookmish commented 3 years ago

READY FOR REVIEW

Summary

Need Review By (Date)

Urgency

Steps to Test

See Also

pookmish commented 3 years ago

the parameters get urlencoded and then decoded, so the result would be the same as if a user tried to put the malicious parameters into the url manually. I don't think it's a concern