missing URL-encoding in audit log

[Cantor, Scott]

On 7/24/17, 6:23 PM, "users on behalf of Andrew Morgan" <users-bounces at shibboleth.net on behalf of morgan at orst.edu> wrote:

> I didn't find an open bug for this.  Should the IDP be escaping the pipe symbol somehow?

I'm not sure if it's legal in a URL in general, but the audit log doesn't know anything about what delimiter you're using because that's arbitrary. So it would probably require that some kind of pluggable behavior be used, which is sort of already what it has since the audit field can be overridden with an arbitrary script or class to produce the value to log.

-- Scott