Flag XML comments appearing inside X509Certificate elements. These ca…

…use problems for (at least) Shibboleth 1.3f, but probably other software as well.
InCommon · Jun 2, 2010 · 5679c2e · 5679c2e
1 parent 2afc2c5
commit 5679c2e
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/build/check_shibboleth.xsl b/build/check_shibboleth.xsl
@@ -149,4 +149,14 @@
 	</xsl:template>
 
 
+	<!--
+		The Shibboleth 1.3f SP, probably along with other software, has
+		problems with comments inside certificate representations.
+	-->
+	<xsl:template match="ds:X509Certificate[comment()]">
+		<xsl:call-template name="fatal">
+			<xsl:with-param name="m">X509Certificate contains XML comment</xsl:with-param>
+		</xsl:call-template>
+	</xsl:template>
+
 </xsl:stylesheet>