[JIRA] Commented: (EDS-30) Cookie decoding does not interpret %20 and '+' as equivalent

Rod Widdowson (JIRA) noreply at shibboleth.net
Thu Dec 29 11:13:26 GMT 2011


    [ https://issues.shibboleth.net/jira/browse/EDS-30?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13746#comment-13746 ] 

Rod Widdowson commented on EDS-30:
----------------------------------

My suspicion is that the EDS is bug for bug compatible with the CDS so I'll enter a case for that.

> Cookie decoding does not interpret %20 and '+' as equivalent
> ------------------------------------------------------------
>
>                 Key: EDS-30
>                 URL: https://issues.shibboleth.net/jira/browse/EDS-30
>             Project: Embedded Discovery Service
>          Issue Type: Bug
>    Affects Versions: 1.0.1
>            Reporter: Rod Widdowson
>            Assignee: Rod Widdowson
>             Fix For: 1.1
>
>
> CDS and EDS use the explicit text '+' to separate the entityIDs in the _saml_IDP.  The SP uses '%20' (which should be acceptable as I understand the specifications).
> This appears to be because the java RTL seamlessly changes '+' into ' ' and vice versa, but the javascript RTL doesn't (at least on the platforms we tested with).
> Find, reproduce and fix.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the commits mailing list