Refer to the OASIS JIRA ticket about data: URIs in mdui:Logo.

InCommon · Feb 5, 2013 · 420138d · 420138d
1 parent 8c52106
commit 420138d
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/mdx/_rules/check_mdui.xsl b/mdx/_rules/check_mdui.xsl
@@ -176,7 +176,10 @@
 			
 			This is a SHOULD in the specification; we treat it as a MUST here.
 			
-			Exception: allow data: URIs as well.
+			Exception: allow data: URIs as well.  The spec is currently
+			ambiguous about this, clarification ticket is here:
+			
+			https://tools.oasis-open.org/issues/browse/SECURITY-24
 		-->
 		<xsl:if test="not(starts-with(., 'https://'))">
 			<xsl:if test="not(starts-with(., 'data:'))">