touch-packages team mailing list archive

[David Barth <david.barth@xxxxxxxxxxxxx>]

** Changed in: webapps-sprint
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to webbrowser-app in Ubuntu.
https://bugs.launchpad.net/bugs/1452142

Title:
  [webapp-container] Remember SAML providers in URL patterns

Status in Webapps Team Task Tracking Project:
  Fix Released
Status in Web Browser App:
  Invalid
Status in webbrowser-app package in Ubuntu:
  Fix Released

Bug description:
  The implementation of the fix for bug 1451432 adds the SAML provider
  site to the list of the allowed URL patterns, so that the SAML
  provider's website will be opened within the webapp-container itself
  and not being delegated to the browser.

  This is working fine, but we recently noticed that sometimes Google
  redirects the user to the SAML provider's website without passing the
  "SAMLRequest" parameter in the URL query; when that happens, the
  webapp container will delegate the opening of that page to the
  browser, since the URL is not in the allowed URL patterns.

  The proposed solution is for the webapp-container to store the SAML
  provider's URL somewhere in a config file, and always append the
  contents of that file to the list of the allowed URL patterns.

To manage notifications about this bug go to:
https://bugs.launchpad.net/webapps-sprint/+bug/1452142/+subscriptions