Unexpected reproducible behavior of PermitValue rule of type ScopeRegex in Shibboleth SP 3.4.1

[Cantor, Scott]

> It's pretty vanilla. It's up to you--if it were me, I would at least verify the
> behavior and document it.

There is literally no documentation (and never has been) for what Xerces defines as a regular expression. The SP has documented (in some form somewhere) that its only support for them is entirely based on Xerces' implementation, which is known to be pretty buggy and limited.

Any bug reports are always welcomed in Jira (and I would generally re-file them upstream myself against Xerces just as a record), they're just not going to be fixed because that project is dead in all but name.

The SP will be replaced in Java or just retired, as the membership (and their funding) decides, but this code is frozen and Xerces is the main reason for that. It has to be retired.

-- Scott