Merge pull request #20 from nginx-shib/version-update

Version update in Travis CI

.travis.yml

@@ -5,11 +5,11 @@ compilers:
 env:
   # Don't use `NGINX` as the variable name or Nginx won't daemonise
   # Mainline
-  - SHIB_NGINX_VERSION=1.11.1 SHIB_DYNAMIC_MODULE=true
-  - SHIB_NGINX_VERSION=1.11.1 SHIB_DYNAMIC_MODULE=false
+  - SHIB_NGINX_VERSION=1.11.13 SHIB_DYNAMIC_MODULE=true
+  - SHIB_NGINX_VERSION=1.11.13 SHIB_DYNAMIC_MODULE=false
   # Stable
-  - SHIB_NGINX_VERSION=1.10.1 SHIB_DYNAMIC_MODULE=true
-  - SHIB_NGINX_VERSION=1.10.1 SHIB_DYNAMIC_MODULE=false
+  - SHIB_NGINX_VERSION=1.10.3 SHIB_DYNAMIC_MODULE=true
+  - SHIB_NGINX_VERSION=1.10.3 SHIB_DYNAMIC_MODULE=false
   # Previous stable
   - SHIB_NGINX_VERSION=1.8.1 SHIB_DYNAMIC_MODULE=false
 sudo: false

README.rst

@@ -7,7 +7,9 @@ Shibboleth auth request module for Nginx
 This module allows Nginx to work with Shibboleth, by way of Shibboleth's
 FastCGI authorizer.  This module requires specific configuration in order to
 work correctly, as well as Shibboleth's FastCGI authorizer application
-available on the system.
+available on the system.  It aims to be similar to parts of Apache's
+`mod_shib`_, though Shibboleth authorisation and authentication settings are 
+configured via `shibboleth2.xml`_ rather than in the web server configuration.
 
 With this module configured against a ``location`` block, incoming requests
 are authorized within Nginx based upon the result of a subrequest to
@@ -336,4 +338,5 @@ This module uses `Semantic Versioning <http://semver.org/>`_ and all releases
 are tagged on GitHub, which allows package downloads of individual tags.
 
 .. _FastCGI Authorizer spec: http://www.fastcgi.com/drupal/node/6?q=node/22#S6.3
-
+.. _mod_shib: https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig
+.. _shibboleth2.xml: https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPShibbolethXML

ngx_http_shibboleth_module.c

@@ -296,8 +296,8 @@ ngx_http_auth_request_handler(ngx_http_request_t *r)
                         continue;
                     }
 
-                    if (ngx_strncasecmp(h[i].key.data,
-                                (u_char *) "Variable-", 9) == 0) {
+                    if (h[i].key.len >= 9 &&
+                        ngx_strncasecmp(h[i].key.data, (u_char *) "Variable-", 9) == 0) {
                         /* copy header into original request */
                         hi = ngx_list_push(&r->headers_in.headers);