X-Git-Url: http://www.project-moonshot.org/gitweb/?a=blobdiff_plain;f=saml%2Fsaml2%2Fbinding%2Fimpl%2FSAML2ArtifactEncoder.cpp;h=80626f5ed39560771bfe997d8d6b39cdab52efd7;hb=refs%2Ftags%2F2.3;hp=9ac6deab89e7329bc15f71c855eaa51da62ef828;hpb=c072b75e6f6e05e24a1c35b952008b38d0d375c1;p=shibboleth%2Fcpp-opensaml.git diff --git a/saml/saml2/binding/impl/SAML2ArtifactEncoder.cpp b/saml/saml2/binding/impl/SAML2ArtifactEncoder.cpp index 9ac6dea..80626f5 100644 --- a/saml/saml2/binding/impl/SAML2ArtifactEncoder.cpp +++ b/saml/saml2/binding/impl/SAML2ArtifactEncoder.cpp @@ -17,7 +17,7 @@ /** * SAML2ArtifactEncoder.cpp * - * SAML 2.0 HTTP-Artifact binding message encoder + * SAML 2.0 HTTP-Artifact binding message encoder. */ #include "internal.h" @@ -27,12 +27,14 @@ #include "saml2/binding/SAML2Artifact.h" #include "saml2/core/Protocols.h" #include "saml2/metadata/Metadata.h" +#include "signature/ContentReference.h" #include #include #include #include #include +#include #include #include #include @@ -112,14 +114,14 @@ long SAML2ArtifactEncoder::encode( xmltooling::NDC ndc("encode"); #endif Category& log = Category::getInstance(SAML_LOGCAT".MessageEncoder.SAML2Artifact"); - log.debug("validating input"); + if (!destination) + throw BindingException("Encoding response requires a destination."); HTTPResponse* httpResponse=dynamic_cast(&genericResponse); if (!httpResponse) throw BindingException("Unable to cast response interface to HTTPResponse type."); if (relayState && strlen(relayState)>80) throw BindingException("RelayState cannot exceed 80 bytes in length."); - if (xmlObject->getParent()) throw BindingException("Cannot encode XML content with parent."); @@ -191,6 +193,7 @@ long SAML2ArtifactEncoder::encode( TemplateEngine* engine = XMLToolingConfig::getConfig().getTemplateEngine(); if (!engine) throw BindingException("Encoding artifact using POST requires a TemplateEngine instance."); + HTTPResponse::sanitizeURL(destination); ifstream infile(m_template.c_str()); if (!infile) throw BindingException("Failed to open HTML template for POST response ($1).", params(1,m_template.c_str()));