From 874ebd25738dec16f1c3e1d0530b1e1a905dbcc7 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Tue, 6 Jun 2017 16:26:39 +0100
Subject: [PATCH] Correct handling of non-https Logo elements by changing
 filter ordering

See incommon/inc-meta#64.
---
 mdx/incommon/edugain-policy.xml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/mdx/incommon/edugain-policy.xml b/mdx/incommon/edugain-policy.xml
index a467133e..37dbe782 100644
--- a/mdx/incommon/edugain-policy.xml
+++ b/mdx/incommon/edugain-policy.xml
@@ -53,6 +53,14 @@
                     <property name="whitelistingRegistrationAuthorities" value="false"/>
                 </bean>
 
+                <!--
+                    Technical Policy rule 4 (to be renumbered).
+
+                    "Remove (and log the removal of) all imported mdui:Logo elements
+                    (not entities) with a URL that is not HTTPS-protected."
+                -->
+                <ref bean="stripMDUILogoHttp"/>
+
                 <!--
                     Technical Policy rule 2.
 
@@ -225,14 +233,6 @@
                     </property>
                 </bean>
 
-                <!--
-                    Technical Policy rule 4.
-
-                    "Remove (and log the removal of) all imported mdui:Logo elements
-                    (not entities) with a URL that is not HTTPS-protected."
-                -->
-                <ref bean="stripMDUILogoHttp"/>
-
                 <!--
                     Technical Policy rule 5.