Skip to content

2.5.3

Choose a tag to compare

@jrchamp jrchamp released this 23 Feb 17:38
· 28 commits to master since this release
e85f5c4

What's Changed

  • shibboleth: Require spoofkey check for http; deprecate bypass by @jrchamp in #109
  • shibboleth: Simplify role header, value checks by @jrchamp in #110
  • Only allow redirects for approved hosts by @jrchamp in #112

Full Changelog: 2.5.2...2.5.3