Passing attribute with whitespace value

[Cantor, Scott]

On 7/28/22, 10:29 AM, "users on behalf of Mark Scarbrough" <users-bounces at shibboleth.net on behalf of scarbrom at uci.edu> wrote:

>    Is there a way to allow the IdP to pass this value?

No, though it's extremely deep in the stack where the trim occurs. It's not in the reslolver, it's not in the encoder, it's inside the OpenSAML utility class that deals with XML string content of any sort and trims when it stores the value into the field that eventually becomes the DOM text node.

Which is to say, it's not going to get fixed any time soon, the risk would be too high. Conceivably a V5 enhancement could implement some sort of flag that could allow the behavior to be overridden so that it would only affect specific cases, reducing the risk.

But this is a bad idea, just as passing empty or null values are, they should never be used as signals of anything, that's just something one learns as a programmer very early on after making that kind of mistake.

-- Scott