Skip to main content
Bob2841038875de
Participant
Sep 18, 2023 2:40 PM UTC
Answered

Slow Processing of SAML assertion

I have a page that doesn't have a fully functional SSO process. It only receives a SAML assertion and processes a login. After an upgrade to CF 2023, the processing takes 30 seconds. On CF 2018 it was 2-3 seconds. I created a test page that simply dumps the assertion. Just the dump (no other processing) also takes 30 seconds. I tried sending the test page a field of plain text that was equal in length to the assertion, and it dumped in 2-3 seconds. Any ideas as to what could cause this slowness only with the SAML assertion?

    This topic is closed to new replies. Start a new post to keep the conversation going.
    Bob2841038875deCorrect answer
    Participant
    Sep 28, 2023 12:53 PM UTC

    I found the cause myself so I thought I would post it in case it helps anyone in the future. We had expanded the RegEx in neo-security.xml that attempts to replace XSS attempts with the text "Invalid Content". When I rolled this back to the default version, the problem disappeared.

    View reply

    1 reply

    Bob2841038875deAuthorCorrect answer
    Participant
    Sep 28, 2023 12:53 PM UTC

    I found the cause myself so I thought I would post it in case it helps anyone in the future. We had expanded the RegEx in neo-security.xml that attempts to replace XSS attempts with the text "Invalid Content". When I rolled this back to the default version, the problem disappeared.

    Translate
    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices