HTML hyperlink in MDUI Description

[Cantor, Scott]

On 11/16/17, 5:15 PM, "users on behalf of Doan, Tommy" <users-bounces at shibboleth.net on behalf of tdoan at smu.edu> wrote:

> Of course there are legitimate concerns for using the encodeForHTML function here when the metadata is not trusted. In this
> case, the metadata is trusted, but I don’t know how to inform login.vm about trusted vs untrusted metadata.

Tom answered the original question, but for the record, all metadata has to be 100% trusted or you are absolutely done. That is a fundamental assumption of the software. The point of filters is to allow some control over what actually makes it in but once it's in, it's in.
 
-- Scott