Skip to content
This repository has been archived by the owner on Oct 24, 2020. It is now read-only.

Latest commit

 

History

History
10 lines (6 loc) · 427 Bytes

CHANGELOG.md

File metadata and controls

10 lines (6 loc) · 427 Bytes
Raw

1.3.0.1

  • Fixes critical security vulnerability in 1.3.0, by
  • Changes strategy for sharing state between CAS authenticated resource and IdP from passing state via URL parameter to passing state via session-id-keyed attribute in the IdP's ServletContext via a cross-context access by the CASified resource context.

1.3.0

  • Initial tagged release.
  • Includes critical security vulnerability. Do not use this version.