From 8e55ad9900776b07d4cb2b4e4168b262748d3411 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Thu, 31 Jan 2013 20:13:00 +0000
Subject: [PATCH] Allow data: URIs as well as https:// URLs in mdui:Logo.  The
 spec is unclear about this but some people (e.g., SWITCH) are using it.  I've
 asked the OASIS SAML TC to clarify the intent.

---
 mdx/_rules/check_mdui.xsl | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/mdx/_rules/check_mdui.xsl b/mdx/_rules/check_mdui.xsl
index e03f9ffa..15194acd 100644
--- a/mdx/_rules/check_mdui.xsl
+++ b/mdx/_rules/check_mdui.xsl
@@ -175,11 +175,15 @@
 			Require that the URL starts with https://
 			
 			This is a SHOULD in the specification; we treat it as a MUST here.
+			
+			Exception: allow data: URIs as well.
 		-->
 		<xsl:if test="not(starts-with(., 'https://'))">
-			<xsl:call-template name="error">
-				<xsl:with-param name="m">mdui:Logo URL does not start with https://</xsl:with-param>
-			</xsl:call-template>
+			<xsl:if test="not(starts-with(., 'data:'))">
+				<xsl:call-template name="error">
+					<xsl:with-param name="m">mdui:Logo URL does not start with https://</xsl:with-param>
+				</xsl:call-template>
+			</xsl:if>
 		</xsl:if>
 	</xsl:template>