We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
2 parents b99bc3e + 2568dba commit 8d8aaa3Copy full SHA for 8d8aaa3
lib/rubycas-client-rails.rb
@@ -288,7 +288,7 @@ def single_sign_out(controller)
288
289
if controller.request.post? &&
290
controller.params['logoutRequest'] &&
291
- controller.params['logoutRequest'] =~
+ URI.unescape(controller.params['logoutRequest']) =~
292
%r{^<samlp:LogoutRequest.*?<samlp:SessionIndex>(.*)</samlp:SessionIndex>}m
293
# TODO: Maybe check that the request came from the registered CAS server? Although this might be
294
# pointless since it's easily spoofable...
0 commit comments