From be3aa4e501f37b57b52be05370fef9e43e1e6bb1 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Thu, 25 Nov 2010 15:13:21 +0000
Subject: [PATCH] Don't permit a scope value which is just "ac.uk", apparently
 a common error in metadata we receive.

---
 build/check_misc.xsl | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/build/check_misc.xsl b/build/check_misc.xsl
index a9db0770..1444c42a 100644
--- a/build/check_misc.xsl
+++ b/build/check_misc.xsl
@@ -254,6 +254,16 @@
 		<xsl:call-template name="fatal">
 			<xsl:with-param name="m">empty xml:lang attribute</xsl:with-param>
 		</xsl:call-template>
+	</xsl:template>
+	
+	
+	<!--
+		A Shibboleth scope shouldn't be just "ac.uk".
+	-->
+	<xsl:template match="shibmd:Scope[.='ac.uk']">
+		<xsl:call-template name="fatal">
+			<xsl:with-param name="m">bare 'ac.uk' scope not permitted</xsl:with-param>
+		</xsl:call-template>
 	</xsl:template>
 
 </xsl:stylesheet>