Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ordering issue with Auth Check for SAML Validation #23

Closed
argh128 opened this issue Jul 23, 2016 · 0 comments
Closed

Ordering issue with Auth Check for SAML Validation #23

argh128 opened this issue Jul 23, 2016 · 0 comments

Comments

@argh128
Copy link
Contributor

argh128 commented Jul 23, 2016 •
edited
Loading

The Auth Validation page /wp-login.php?saml_validate_config when not authenticated leaks information about the plugin configuration because the initial page content is sent before the 401 HEADER is marked.

https://github.com/onelogin/wordpress-saml/blob/master/onelogin-saml-sso/php/validate.php

Warning: Cannot modify header information - headers already sent by (output started at /var/www/html/wp-content/plugins/onelogin-saml-sso/php/validate.php:17) in /var/www/html/wp-content/plugins/onelogin-saml-sso/php/validate.php on line 20 Access Forbidden!
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@argh128