William Desportes e3f4a57aa6 Fix #14321 - leaked HTML on auth_type=signon before redirect occurs and on error page when SignonURL is not set ...

This fix also fixes the display when SignonURL is empty at configuration time.

When the user was redirected there was HTML in the output that could leak some interesting details about the server or the user.

Signed-off-by: William Desportes <williamdes@wdes.fr>

2021-08-25 01:36:36 +02:00

..

AuthenticationConfig.php

Removed inline styles from AuthenticationConfig.php file-issue 12262 (#13979)

2018-02-09 19:34:32 -02:00

AuthenticationCookie.php

Fix #14184 - HTTPS/HTTP cookie separation issue (aka Failed to set session cookie. Maybe you are using HTTP instead of HTTPS)

2019-10-30 00:06:12 +01:00

AuthenticationHttp.php

…

AuthenticationSignon.php

Fix #14321 - leaked HTML on auth_type=signon before redirect occurs and on error page when SignonURL is not set

2021-08-25 01:36:36 +02:00