W3C home > Mailing lists > Public > ietf-http-wg@w3.org > July to September 2009

Re: #173: CR and LF in chunk extension values

From: Henrik Nordstrom <henrik@henriknordstrom.net>
Date: Tue, 25 Aug 2009 16:58:25 +0200
To: Julian Reschke <julian.reschke@gmx.de>
Cc: Mark Nottingham <mnot@mnot.net>, HTTP Working Group <ietf-http-wg@w3.org>, Bjoern Hoehrmann <derhoermi@gmx.net>
Message-Id: <1251212305.31991.230.camel@henriknordstrom.net>
tis 2009-08-25 klockan 15:29 +0200 skrev Julian Reschke:
> Julian Reschke wrote:
> > ...
> 
> OK, so my understanding is that we disallow all control characters 
> except HTAB in comment and quoted-string, escaped or not.

Yes.

> Proposed patch: 
> <http://trac.tools.ietf.org/wg/httpbis/trac/attachment/ticket/173/173.diff>.

>     specifically pointed out in the ABNF.  Control characters other than
>     HTAB are no longer allowed in comment and quoted-string text (escaped
>     or not).

Note: CRLF in the form of obs-fold is still allowed in both, just as it
has always been. It's just quoting using '\' which has been restricted.

> Feedback appreciated,

Looks good to me.

Regards
Henrik
Received on Tuesday, 25 August 2009 15:09:56 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:08 GMT