set URL/HTML in mdui:Description

[Cantor, Scott]

On 8/18/17, 12:58 PM, "users on behalf of Tom Scavo" <users-bounces at shibboleth.net on behalf of trscavo at gmail.com> wrote:

> If we're talking about static metadata, then yes, you're right, the
> metadata owner can include any content whatsoever. However, a metadata
> consumer that actively fetches metadata across a network either trusts
> the metadata producer to NOT include harmful content or (better yet)
> the consumer escapes potentially harmful content.

That certainly was my point, yes.

-- Scott