From: Scott Cantor <cantor.2@osu.edu>
Date: Tue, 27 Oct 2009 01:45:02 +0000 (+0000)
Subject: Enable validation of attribute files by default.
X-Git-Tag: 2.3~30
X-Git-Url: http://www.project-moonshot.org/gitweb/?p=shibboleth%2Fcpp-sp.git;a=commitdiff_plain;h=990608c0ca683de6d5b192810f1f8b70c0ce073a

Enable validation of attribute files by default.
---

diff --git a/configs/shibboleth2.xml b/configs/shibboleth2.xml
index 4a17f93..388776f 100644
--- a/configs/shibboleth2.xml
+++ b/configs/shibboleth2.xml
@@ -232,13 +232,13 @@
         </TrustEngine>
 
         <!-- Map to extract attributes from SAML assertions. -->
-        <AttributeExtractor type="XML" path="attribute-map.xml"/>
+        <AttributeExtractor type="XML" validate="true" path="attribute-map.xml"/>
         
         <!-- Use a SAML query if no attributes are supplied during SSO. -->
         <AttributeResolver type="Query"/>
 
         <!-- Default filtering policy for recognized attributes, lets other data pass. -->
-        <AttributeFilter type="XML" path="attribute-policy.xml"/>
+        <AttributeFilter type="XML" validate="true" path="attribute-policy.xml"/>
 
         <!-- Simple file-based resolver for using a single keypair. -->
         <CredentialResolver type="File" key="sp-key.pem" certificate="sp-cert.pem"/>