Given that I pass in a custom GET parameter as the server config option,
https://example.org/?spnego=disabled,
the GET parameter is treated as part of the host url, not as url parameter:
https://example.org/?spnego=disabled/sap/bc/adt/cts/transports
Valid (upload) scenarios for this are to bypass SAML2 and SPNEGO authentication (?saml2=disabled ?spnego=disabled)
I will provide a fix for this as a PR - just keeping track of the issue here 😄
Given that I pass in a custom
GET
parameter as theserver
config option,https://example.org/?spnego=disabled
, theGET
parameter is treated as part of the host url, not as url parameter:https://example.org/?spnego=disabled/sap/bc/adt/cts/transports
Valid (upload) scenarios for this are to bypass SAML2 and SPNEGO authentication (
?saml2=disabled ?spnego=disabled
)I will provide a fix for this as a PR - just keeping track of the issue here 😄