From 289c2fd5238a066880fa5ccd74fca2de11da1578 Mon Sep 17 00:00:00 2001 From: Scott Cantor Date: Mon, 5 Feb 2007 16:05:21 +0000 Subject: [PATCH] Move policy execution above the destination check. --- saml/saml2/binding/impl/SAML2POSTDecoder.cpp | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/saml/saml2/binding/impl/SAML2POSTDecoder.cpp b/saml/saml2/binding/impl/SAML2POSTDecoder.cpp index 414e24b..5f763f5 100644 --- a/saml/saml2/binding/impl/SAML2POSTDecoder.cpp +++ b/saml/saml2/binding/impl/SAML2POSTDecoder.cpp @@ -113,6 +113,9 @@ XMLObject* SAML2POSTDecoder::decode( if (!m_validate) SchemaValidators.validate(xmlObject.get()); + + // Run through the policy. + policy.evaluate(*root, &genericRequest); // Check destination URL. auto_ptr_char dest(request ? request->getDestination() : response->getDestination()); @@ -126,7 +129,5 @@ XMLObject* SAML2POSTDecoder::decode( throw BindingException("SAML message delivered with POST to incorrect server URL."); } - // Run through the policy. - policy.evaluate(*root, &genericRequest); return xmlObject.release(); } -- 2.1.4