XML tooling exception - malformed url

sanjay joshi sanjayk.joshi at live.com
Fri Jan 13 19:18:08 GMT 2012


Thanks again.

There are two other SP in the same setup version 3.1 wondering why they are not throwing this exception since IDP more or less would be sending relaystate to them as well.

Sanjay

> From: cantor.2 at osu.edu
> To: users at shibboleth.net
> Subject: Re: XML tooling exception - malformed url
> Date: Fri, 13 Jan 2012 18:32:16 +0000
> 
> On 1/13/12 1:27 PM, "sanjay joshi" <sanjayk.joshi at live.com> wrote:
> 
> >Thanks for the comment, is there anything could be done on SP to hide or
> >redirect the use to some other page instead of showing exception ?
> 
> Not in that release (see below). The problem is the IdP has a bug. The use
> of RelayState in a response is driven by the request. In other words, the
> source of the RelayState is the source of the request, which is the SP. If
> the SP gets back a value it didn't produce, there's no interop.
> 
> That said, I think my code could treat a malformed relay state value that
> isn't a safe URL as a no-op and just use homeURL as if it weren't present,
> so you're welcome to file that as a RFE in our Jira.
> 
> -- Scott
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120113/1c740cc1/attachment.html 


More information about the users mailing list