Return-Path: X-Original-To: apmail-cxf-commits-archive@www.apache.org Delivered-To: apmail-cxf-commits-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id C392E18AB5 for ; Fri, 22 Jan 2016 16:17:29 +0000 (UTC) Received: (qmail 45543 invoked by uid 500); 22 Jan 2016 16:17:29 -0000 Delivered-To: apmail-cxf-commits-archive@cxf.apache.org Received: (qmail 45482 invoked by uid 500); 22 Jan 2016 16:17:29 -0000 Mailing-List: contact commits-help@cxf.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cxf.apache.org Delivered-To: mailing list commits@cxf.apache.org Received: (qmail 45473 invoked by uid 99); 22 Jan 2016 16:17:29 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 22 Jan 2016 16:17:29 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id 72CBBE0098; Fri, 22 Jan 2016 16:17:29 +0000 (UTC) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: coheigea@apache.org To: commits@cxf.apache.org Message-Id: <9d70c749bb8a4dbdb447edf85bc838db@git.apache.org> X-Mailer: ASF-Git Admin Mailer Subject: cxf-fediz git commit: Loosen the scheme restriction for the IdP Date: Fri, 22 Jan 2016 16:17:29 +0000 (UTC) Repository: cxf-fediz Updated Branches: refs/heads/1.2.x-fixes db2f2a3ca -> fc77fdd84 Loosen the scheme restriction for the IdP Project: http://git-wip-us.apache.org/repos/asf/cxf-fediz/repo Commit: http://git-wip-us.apache.org/repos/asf/cxf-fediz/commit/fc77fdd8 Tree: http://git-wip-us.apache.org/repos/asf/cxf-fediz/tree/fc77fdd8 Diff: http://git-wip-us.apache.org/repos/asf/cxf-fediz/diff/fc77fdd8 Branch: refs/heads/1.2.x-fixes Commit: fc77fdd84ab32165367516088e6a2e16b4174879 Parents: db2f2a3 Author: Colm O hEigeartaigh Authored: Fri Jan 22 13:58:14 2016 +0000 Committer: Colm O hEigeartaigh Committed: Fri Jan 22 16:17:22 2016 +0000 ---------------------------------------------------------------------- .../org/apache/cxf/fediz/service/idp/beans/STSClientAction.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cxf-fediz/blob/fc77fdd8/services/idp/src/main/java/org/apache/cxf/fediz/service/idp/beans/STSClientAction.java ---------------------------------------------------------------------- diff --git a/services/idp/src/main/java/org/apache/cxf/fediz/service/idp/beans/STSClientAction.java b/services/idp/src/main/java/org/apache/cxf/fediz/service/idp/beans/STSClientAction.java index 033d5c6..fc47c23 100644 --- a/services/idp/src/main/java/org/apache/cxf/fediz/service/idp/beans/STSClientAction.java +++ b/services/idp/src/main/java/org/apache/cxf/fediz/service/idp/beans/STSClientAction.java @@ -313,8 +313,8 @@ public class STSClientAction { (String)WebUtils.getAttributeFromFlowScope(context, FederationConstants.PARAM_REPLY); // Validate it first using commons-validator - String[] schemes = {"https"}; - UrlValidator urlValidator = new UrlValidator(schemes, UrlValidator.ALLOW_LOCAL_URLS); + UrlValidator urlValidator = new UrlValidator(UrlValidator.ALLOW_LOCAL_URLS + + UrlValidator.ALLOW_ALL_SCHEMES); if (!urlValidator.isValid(wreply)) { LOG.warn("The given wreply parameter {} is not a valid URL", wreply); throw new ProcessingException(TYPE.BAD_REQUEST);