-
-
Notifications
You must be signed in to change notification settings - Fork 177
Pull requests: OpenIdentityPlatform/OpenAM
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Harden AuthXMLRequest.setPrincipal against arbitrary class instantiation (same pattern as GHSA-wg5r-wc3x-39vc)
#1088
opened Jul 29, 2026 by
BarakSrour
Loading…
[#1080] OAuth2 consent: accept the resource owner's session id as the csrf value
#1083
opened Jul 27, 2026 by
maximthomas
Contributor
Loading…
Migrate configurator/upgrade wizard from Apache Click to Jakarta Servlets + FreeMarker
dependencies
Pull requests that update a dependency file
needs testing
refactoring
Code cleanup, refactor, dead-code or dependency removal
ui
XUI / admin console / end-user UI
Enable HttpOnly session cookies by default
help wanted
needs testing
security
Security fix or hardening (CVE, GHSA, XSS/CSRF/SSRF)
JAXB3 Migration
help wanted
needs testing
refactoring
Code cleanup, refactor, dead-code or dependency removal
ProTip!
What’s not been updated in a month: updated:<2026-06-29.