Shibboleth Developers

["Scott Cantor" <>]

Since I realized it was unsafe to use the regex support I added to analyze
query strings, I went ahead and just added an explicit <Query> element to
allow for mapping based on query parameters. You can nest them anywhere,
including inside a PathRegex, or inside another Query element, to create
conjunction rules requiring multiple parameters.

It allows mapping based on the presence of any value or by regex matching
specific parameters values. It operates on the decoded query string, so it
should be "safe" regardless of how mangled the original encoding is.

This will be in the upcoming beta and backported to 1.3.1. I think this is
about everything for this round of RequestMap changes, so I'll work with
Nate to get it fully documented.

-- Scott