POST binding URL now escaped, why?

[Etienne Dysli]

Hi all,

One of our developers noticed that, going from IdP 2.2.1 to 2.3.3, the
URL in the form action of the POST binding is now escaped: colons and
slashes are replaced by entities : and / respectively. For
example, https://sp.unil.ch/Shibboleth.sso/SAML2/POST becomes
https://sp.unil.ch/Shibboleth.sso/SAML2/POST.

I'm not (yet) claiming this is wrong but I'd like to know the cause of
this change. From my investigation neither the template
saml2-post-binding.vm nor the Velocity version (1.5) changed between IdP
2.2.1 and 2.3.3. So I'm left wondering why that happened...

Regards,
   Etienne

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 554 bytes
Desc: OpenPGP digital signature
Url : http://shibboleth.net/pipermail/users/attachments/20110831/9ba5853a/attachment.bin