[JIRA] Commented: (EDS-30) Cookie decoding does not interpret %20 and '+' as equivalent

[Scott Cantor (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/EDS-30?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13673#comment-13673 ] 

Scott Cantor commented on EDS-30:
---------------------------------

The same reported indicated there may be an ordering bug. I think the EDS is reversing the order of the IdPs, which should be most recent last.

> Cookie decoding does not interpret %20 and '+' as equivalent
> ------------------------------------------------------------
>
>                 Key: EDS-30
>                 URL: https://issues.shibboleth.net/jira/browse/EDS-30
>             Project: Embedded Discovery Service
>          Issue Type: Bug
>    Affects Versions: 1.0.1
>            Reporter: Rod Widdowson
>            Assignee: Rod Widdowson
>             Fix For: 1.1
>
>
> CDS and EDS use the explicit text '+' to separate the entityIDs in the _saml_IDP.  The SP uses '%20' (which should be acceptable as I understand the specifications).
> This appears to be because the java RTL seamlessly changes '+' into ' ' and vice versa, but the javascript RTL doesn't (at least on the platforms we tested with).
> Find, reproduce and fix.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira