W3C home > Mailing lists > Public > ietf-http-wg@w3.org > July to September 2009

Re: #173: CR and LF in chunk extension values

From: Julian Reschke <julian.reschke@gmx.de>
Date: Thu, 27 Aug 2009 11:53:03 +0200
Message-ID: <4A96577F.2020008@gmx.de>
To: Henrik Nordstrom <henrik@henriknordstrom.net>
CC: Mark Nottingham <mnot@mnot.net>, HTTP Working Group <ietf-http-wg@w3.org>, Bjoern Hoehrmann <derhoermi@gmx.net>
Henrik Nordstrom wrote:
> tis 2009-08-25 klockan 15:29 +0200 skrev Julian Reschke:
>> Julian Reschke wrote:
>>> ...
>> OK, so my understanding is that we disallow all control characters 
>> except HTAB in comment and quoted-string, escaped or not.
> 
> Yes.
> 
>> Proposed patch: 
>> <http://trac.tools.ietf.org/wg/httpbis/trac/attachment/ticket/173/173.diff>.
> 
>>     specifically pointed out in the ABNF.  Control characters other than
>>     HTAB are no longer allowed in comment and quoted-string text (escaped
>>     or not).
> 
> Note: CRLF in the form of obs-fold is still allowed in both, just as it
> has always been. It's just quoting using '\' which has been restricted.
> 
>> Feedback appreciated,
> 
> Looks good to me.
> ...

OK, I have applied the change with 
<http://trac.tools.ietf.org/wg/httpbis/trac/changeset/686>.

BR, Julian
Received on Thursday, 27 August 2009 09:53:48 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:08 GMT