missing URL-encoding in audit log

Tue Jul 25 07:30:20 EDT 2017

> On 24 Jul 2017, at 23:55, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
>> I didn't find an open bug for this.  Should the IDP be escaping the pipe symbol somehow?
> 
> I'm not sure if it's legal in a URL in general

IIRC pipe symbols are excluded from URIs as they’re “unwise”,. Which means they’re only allowed if properly escaped (i.e. converted to % whatever whatever). That’s all in RFC 2396.

Rhys.

--
Dr Rhys Smith
Chief Technical Architect, Trust & Identity
Jisc

T: +44 (0) 1235 822145
M: +44 (0) 7968 087821
Skype: rhys-smith
GPG: 0x4638C985
Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG

jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3842 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20170725/b975ce35/attachment-0001.p7s>