GitLab

new feature: redirection on error

See merge request !14

Lukas Haemmerle authored Apr 19, 2021 and Guillaume Rousse committed Nov 12, 2021

Fixed a security issue where a return URL like https://ilias.unibe.ch@google.com could redirect users (in some browsers) to google.com or a malicious domain

This optional feature allows to redirect user to an external error
handling service, instead of displaying errors locally

Fixed a security issue where a return URL like https://ilias.unibe.ch@google.com could redirect users (in some browsers) to google.com or a malicious domain

pass customStrings variable to footer template too

See merge request !11

Conflicts:
 www/js/embeddedWAYF.js

In dev mode, don't display errors as it will make JSON API fail, by displaying errors in json stream

To quickly identify the server instance, include its hostname and the client remote IP as HTML comments.