missing URL-encoding in audit log

[Andrew Morgan]

On Tue, 25 Jul 2017, Cantor, Scott wrote:

> On 7/25/17, 7:59 AM, "users on behalf of Alan Buxey" <users-bounces at shibboleth.net on behalf of alan.buxey at myunidays.com> wrote:
>
>> a recent Tomcat update also stopped | from working too  - should
>> always be escaped.   its %7C anyway, not %6C
>
> Thanks for confirming, that seemed likely.

I've read RFC 2396 (section 2.4.3).  I'm not clear if the CAS service URL 
represented in the audit logs should be in an escaped form or not.  Is the 
log representing a "URI" or something else in that context?

If it is a URI, then I propose that it should be URI escaped and the | 
would be represented as %7C (thanks for the correction).

If it is just a string, then it would be nice to have a simple 
configuration method to escape the field delimiter.

Thanks,
 	Andy