Shib Metadata

[Cantor, Scott]

On 9/18/14, 3:06 PM, "Mark Hunt" <mhunt at boardeffect.com> wrote:

>I have since fixed that entityID issue, I¹m going through now and trying
>to validate against something else, and will report back. Does the
>position of the KeyDescriptors really matter?

It matters for schema validation; whether it matters for processing
depends on the software, but there certainly is no guarantee you can get
invalid XML to work.

> Who/What parses an xml doc
>based on the position in the hierarchy and not on the xml path?

Anything that validates a schema that is defined in part using a type
hierarchy. Nothing to do with parsing, but validation. Whether any given
processing logic itself cares about order depends on its implementation,
and implementing without assumptions about structure is more difficult
than with.

Testshib runs a schema validation check to avoid the worst cases of bogus
metadata from being accepted, but it's hardly perfect at preventing
problems. Metadata is meant to be consumed only from trusted sources, so
testshib has an impossible problem to solve, which it does incompletely.

-- Scott