diff options
| -rw-r--r-- | src/DotNetOpenAuth.OpenId/OpenId/Messages/IndirectSignedResponse.cs | 4 | ||||
| -rw-r--r-- | src/DotNetOpenAuth.OpenId/Xrds/XrdsDocument.cs | 2 |
2 files changed, 3 insertions, 3 deletions
diff --git a/src/DotNetOpenAuth.OpenId/OpenId/Messages/IndirectSignedResponse.cs b/src/DotNetOpenAuth.OpenId/OpenId/Messages/IndirectSignedResponse.cs index 8bceb68..1242b20 100644 --- a/src/DotNetOpenAuth.OpenId/OpenId/Messages/IndirectSignedResponse.cs +++ b/src/DotNetOpenAuth.OpenId/OpenId/Messages/IndirectSignedResponse.cs @@ -404,8 +404,8 @@ namespace DotNetOpenAuth.OpenId.Messages { IsQuerySubsetOf(this.Recipient.Query, this.ReturnTo.Query), OpenIdStrings.ReturnToParamDoesNotMatchRequestUrl, Protocol.openid.return_to, - this.ReturnTo, - this.Recipient); + this.ReturnTo.AbsoluteUri, + this.Recipient.AbsoluteUri); } } } diff --git a/src/DotNetOpenAuth.OpenId/Xrds/XrdsDocument.cs b/src/DotNetOpenAuth.OpenId/Xrds/XrdsDocument.cs index 0e1ecc1..a0c59c4 100644 --- a/src/DotNetOpenAuth.OpenId/Xrds/XrdsDocument.cs +++ b/src/DotNetOpenAuth.OpenId/Xrds/XrdsDocument.cs @@ -54,7 +54,7 @@ namespace DotNetOpenAuth.Xrds { /// <param name="xml">The text that is the XRDS document.</param> [SuppressMessage("Microsoft.Reliability", "CA2000:Dispose objects before losing scope", Justification = "Fixing would decrease readability, and not likely avoid any finalizer on a StringReader anyway.")] public XrdsDocument(string xml) - : this(new XPathDocument(new StringReader(xml)).CreateNavigator()) { } + : this(new XPathDocument(XmlReader.Create(new StringReader(xml), MessagingUtilities.CreateUntrustedXmlReaderSettings())).CreateNavigator()) { } /// <summary> /// Gets the XRD child elements of the document. |