46 lines
1.5 KiB
Diff
46 lines
1.5 KiB
Diff
From 623163348f74fc1bd019a676fa24af69dde79654 Mon Sep 17 00:00:00 2001
|
|
From: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
|
|
Date: Fri, 3 Aug 2018 21:41:34 +0200
|
|
Subject: [PATCH 08/11] make the default max number of state cookies 7 instead
|
|
of unlimited
|
|
|
|
bump to 2.3.8rc1
|
|
|
|
Signed-off-by: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
|
|
(cherry picked from commit 6616372af77df04a9b0b197e759790ecf3f2399a)
|
|
---
|
|
ChangeLog | 5 ++++-
|
|
src/config.c | 2 +-
|
|
2 files changed, 5 insertions(+), 2 deletions(-)
|
|
|
|
diff --git a/ChangeLog b/ChangeLog
|
|
index b6ac513..27f45be 100644
|
|
--- a/ChangeLog
|
|
+++ b/ChangeLog
|
|
@@ -1,5 +1,8 @@
|
|
-08/01/2018
|
|
+
|
|
+08/03/2018
|
|
- add option to set an upper limit to the number of concurrent state cookies via OIDCStateMaxNumberOfCookies; see #331
|
|
+- make the default maximum number of parallel state cookies 7 instead of unlimited; see #331
|
|
+- bump o 2.3.8rc1
|
|
|
|
07/06/2018
|
|
- abort when string length for remote user name substitution is larger than 255 characters
|
|
diff --git a/src/config.c b/src/config.c
|
|
index c793818..6fa6227 100644
|
|
--- a/src/config.c
|
|
+++ b/src/config.c
|
|
@@ -105,7 +105,7 @@
|
|
/* timeout in seconds after which state expires */
|
|
#define OIDC_DEFAULT_STATE_TIMEOUT 300
|
|
/* maximum number of parallel state cookies; 0 means unlimited, until the browser or server gives up */
|
|
-#define OIDC_DEFAULT_MAX_NUMBER_OF_STATE_COOKIES 0
|
|
+#define OIDC_DEFAULT_MAX_NUMBER_OF_STATE_COOKIES 7
|
|
/* default session inactivity timeout */
|
|
#define OIDC_DEFAULT_SESSION_INACTIVITY_TIMEOUT 300
|
|
/* default session max duration */
|
|
--
|
|
2.26.2
|
|
|