ubuntu-webapps-bugs team mailing list archive

[Alberto Mardegan <1452142@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

The implementation of the fix for bug 1451432 adds the SAML provider
site to the list of the allowed URL patterns, so that the SAML
provider's website will be opened within the webapp-container itself and
not being delegated to the browser.

This is working fine, but we recently noticed that sometimes Google
redirects the user to the SAML provider's website without passing the
"SAMLRequest" parameter in the URL query; when that happens, the webapp
container will delegate the opening of that page to the browser, since
the URL is not in the allowed URL patterns.

The proposed solution is for the webapp-container to store the SAML
provider's URL somewhere in a config file, and always append the
contents of that file to the list of the allowed URL patterns.

** Affects: webbrowser-app
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
WebApps bug tracking, which is subscribed to webbrowser-app.
https://bugs.launchpad.net/bugs/1452142

Title:
  [webapp-container] Remember SAML providers in URL patterns

Status in Web Browser App:
  New

Bug description:
  The implementation of the fix for bug 1451432 adds the SAML provider
  site to the list of the allowed URL patterns, so that the SAML
  provider's website will be opened within the webapp-container itself
  and not being delegated to the browser.

  This is working fine, but we recently noticed that sometimes Google
  redirects the user to the SAML provider's website without passing the
  "SAMLRequest" parameter in the URL query; when that happens, the
  webapp container will delegate the opening of that page to the
  browser, since the URL is not in the allowed URL patterns.

  The proposed solution is for the webapp-container to store the SAML
  provider's URL somewhere in a config file, and always append the
  contents of that file to the list of the allowed URL patterns.

To manage notifications about this bug go to:
https://bugs.launchpad.net/webbrowser-app/+bug/1452142/+subscriptions