Allow data: URIs as well as https:// URLs in mdui:Logo. The spec is u…

…nclear about this but some people (e.g., SWITCH) are using it. I've asked the OASIS SAML TC to clarify the intent.
InCommon · Jan 31, 2013 · 8e55ad9 · 8e55ad9
1 parent a90b834
commit 8e55ad9
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/mdx/_rules/check_mdui.xsl b/mdx/_rules/check_mdui.xsl
@@ -175,11 +175,15 @@
 			Require that the URL starts with https://
 			
 			This is a SHOULD in the specification; we treat it as a MUST here.
+			
+			Exception: allow data: URIs as well.
 		-->
 		<xsl:if test="not(starts-with(., 'https://'))">
-			<xsl:call-template name="error">
-				<xsl:with-param name="m">mdui:Logo URL does not start with https://</xsl:with-param>
-			</xsl:call-template>
+			<xsl:if test="not(starts-with(., 'data:'))">
+				<xsl:call-template name="error">
+					<xsl:with-param name="m">mdui:Logo URL does not start with https://</xsl:with-param>
+				</xsl:call-template>
+			</xsl:if>
 		</xsl:if>
 	</xsl:template>