Move policy execution above the destination check.

diff --git a/saml/saml2/binding/impl/SAML2RedirectDecoder.cpp b/saml/saml2/binding/impl/SAML2RedirectDecoder.cpp
index 4c8e3b0..489f709 100644 (file)
--- a/saml/saml2/binding/impl/SAML2RedirectDecoder.cpp
+++ b/saml/saml2/binding/impl/SAML2RedirectDecoder.cpp
@@ -128,6 +128,9 @@ XMLObject* SAML2RedirectDecoder::decode(
     if (!m_validate)
         SchemaValidators.validate(xmlObject.get());
     
+    // Run through the policy.
+    policy.evaluate(*root, &genericRequest);
+
     // Check destination URL.
     auto_ptr_char dest(request ? request->getDestination() : response->getDestination());
     const char* dest2 = httpRequest->getRequestURL();
@@ -140,8 +143,5 @@ XMLObject* SAML2RedirectDecoder::decode(
         throw BindingException("SAML message delivered with Redirect to incorrect server URL.");
     }
 
-    // Run through the policy.
-    policy.evaluate(*root, &genericRequest);
-
     return xmlObject.release();
 }