Closed peppelinux closed 3 years ago
The following AgID tests will fail without any remediation possibile with a standard shibboleth sp distribution
ERROR:spid_sp_test:Test [16] Attributo InResponseTo non specificato. Risultato atteso: KO: : [http status_code: 404] : FAILED ERROR:spid_sp_test:Test [17] Attributo InResponseTo mancante. Risultato atteso: KO: : [http status_code: 404] : FAILED ERROR:spid_sp_test:Test [18] Attributo InResponseTo diverso da ID request. Risultato atteso: KO: : [http status_code: 404] : FAILED
Here a relevant thread https://shibboleth.1660669.n2.nabble.com/Validate-InResponseTo-attribute-td7641623.html
Considerare https://wiki.shibboleth.net/confluence/display/SP3/CSRF
Perhaps this can be closed
Fixed by https://github.com/italia/spid-sp-shibboleth/commit/79d163e39c6f89ca9ab1ee4c42a32c9f4ff6d453
The following AgID tests will fail without any remediation possibile with a standard shibboleth sp distribution
Here a relevant thread https://shibboleth.1660669.n2.nabble.com/Validate-InResponseTo-attribute-td7641623.html