[JIRA] Created: (EDS-30) Cookie decoding does not interpret %20 and '+' as equivalent

Rod Widdowson (JIRA) noreply at shibboleth.net
Mon Oct 24 09:15:26 BST 2011


Cookie decoding does not interpret %20 and '+' as equivalent
------------------------------------------------------------

                 Key: EDS-30
                 URL: https://issues.shibboleth.net/jira/browse/EDS-30
             Project: Embedded Discovery Service
          Issue Type: Bug
    Affects Versions: 1.0.1
            Reporter: Rod Widdowson
            Assignee: Rod Widdowson
             Fix For: 1.1


CDS and EDS use the explicit text '+' to separate the entityIDs in the _saml_IDP.  The SP uses '%20' (which should be acceptable as I understand the specifications).

This appears to be because the java RTL seamlessly changes '+' into ' ' and vice versa, but the javascript RTL doesn't (at least on the platforms we tested with).

Find, reproduce and fix.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the commits mailing list