Accept mil.no as a non-regex scope from eduGAIN in InCommon

InCommon · Apr 15, 2022 · 2ab829d · 2ab829d
1 parent b56e8ee
commit 2ab829d
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/mdx/incommon/edugain-policy.xml b/mdx/incommon/edugain-policy.xml
@@ -301,6 +301,16 @@
                                 p:regex="" p:message="scope element must not be empty"/>
                             <bean p:id="whiteSpace" parent="inc.RejectStringRegexValidator"
                                 p:regex=".*\s.*" p:message="scope '%s' includes white space"/>
+
+                            <!--
+                                Explicitly accept domains which, although they
+                                fall afoul of the public suffic heuristic, are
+                                nevertheless known to be legitimately used as
+                                security domains.
+                            -->
+                            <bean p:id="mil.no" parent="inc.AcceptStringValueValidator"
+                                p:value="mil.no"/>
+
                             <bean p:id="domainName" parent="inc.AsDomainNameStringValidator"
                                 p:message="scope is not a valid domain name: %s">
                                 <property name="validators">