From 420138de120309fb9eaf951fa98087aca3922c2d Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Tue, 5 Feb 2013 17:28:49 +0000
Subject: [PATCH] Refer to the OASIS JIRA ticket about data: URIs in mdui:Logo.

---
 mdx/_rules/check_mdui.xsl | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/mdx/_rules/check_mdui.xsl b/mdx/_rules/check_mdui.xsl
index 15194acd..6c4b3dd9 100644
--- a/mdx/_rules/check_mdui.xsl
+++ b/mdx/_rules/check_mdui.xsl
@@ -176,7 +176,10 @@
 			
 			This is a SHOULD in the specification; we treat it as a MUST here.
 			
-			Exception: allow data: URIs as well.
+			Exception: allow data: URIs as well.  The spec is currently
+			ambiguous about this, clarification ticket is here:
+			
+			https://tools.oasis-open.org/issues/browse/SECURITY-24
 		-->
 		<xsl:if test="not(starts-with(., 'https://'))">
 			<xsl:if test="not(starts-with(., 'data:'))">