<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
Thanks again.<br><br>There are two other SP in the same setup version 3.1 wondering why they are not throwing this exception since IDP more or less would be sending relaystate to them as well.<br><br>Sanjay<br><br><div><div id="SkyDrivePlaceholder"></div>> From: cantor.2@osu.edu<br>> To: users@shibboleth.net<br>> Subject: Re: XML tooling exception - malformed url<br>> Date: Fri, 13 Jan 2012 18:32:16 +0000<br>> <br>> On 1/13/12 1:27 PM, "sanjay joshi" <sanjayk.joshi@live.com> wrote:<br>> <br>> >Thanks for the comment, is there anything could be done on SP to hide or<br>> >redirect the use to some other page instead of showing exception ?<br>> <br>> Not in that release (see below). The problem is the IdP has a bug. The use<br>> of RelayState in a response is driven by the request. In other words, the<br>> source of the RelayState is the source of the request, which is the SP. If<br>> the SP gets back a value it didn't produce, there's no interop.<br>> <br>> That said, I think my code could treat a malformed relay state value that<br>> isn't a safe URL as a no-op and just use homeURL as if it weren't present,<br>> so you're welcome to file that as a RFE in our Jira.<br>> <br>> -- Scott<br>> <br>> --<br>> To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br></div> </div></body>
</html>