Added redirectLimit session parameter to disable open redirect
https://mirantis.jira.com/browse/PROD-23570
Change-Id: I8e76f64204cde49f3c15fd74341b0740adddfbca
diff --git a/shibboleth/files/shibboleth2.xml b/shibboleth/files/shibboleth2.xml
index 4036623..d7df71f 100644
--- a/shibboleth/files/shibboleth2.xml
+++ b/shibboleth/files/shibboleth2.xml
@@ -76,6 +76,7 @@
<Sessions lifetime="{{ server.get('sessions', {}).get('lifetime', 28800) }}" timeout="{{ server.get('sessions', {}).get('timeout', 3600) }}"
relayState="{{ server.get('sessions', {}).get('relaystate', "ss:mem") }}"
checkAddress="{{ server.get('sessions', {}).get('checkaddress', "false") }}" handlerSSL="{{ server.get('sessions', {}).get('handlerssl', "false") }}"
+ redirectLimit="{{ server.get('sessions', {}).get('redirectlimit', "host") }}"
cookieProps="{{ server.get('sessions', {}).get('cookieprops', "http") }}">
<!--