W3C home > Mailing lists > Public > ietf-http-wg@w3.org > July to September 2009

Re: #173: CR and LF in chunk extension values

From: Julian Reschke <julian.reschke@gmx.de>
Date: Thu, 27 Aug 2009 14:03:29 +0200
Message-ID: <4A967611.3000401@gmx.de>
To: Henrik Nordstrom <henrik@henriknordstrom.net>
CC: Mark Nottingham <mnot@mnot.net>, HTTP Working Group <ietf-http-wg@w3.org>, Bjoern Hoehrmann <derhoermi@gmx.net>
Henrik Nordstrom wrote:
> tor 2009-08-27 klockan 11:53 +0200 skrev Julian Reschke:
> 
>> OK, I have applied the change with 
>> <http://trac.tools.ietf.org/wg/httpbis/trac/changeset/686>.
> 
> Looking again.. and no it's not entirely fine.
> 
> ctext and qdtext should not be changed from OWS to WSP. The change is
> only in quoted-text. We can not disallow folding here.
> 
> Sorry for not seeing this earlier.
> ...

It happens; thanks for checking anyway (and this was exactly the reason 
I wanted people to verify this change :-).

For now, I undid the change with 
<http://trac.tools.ietf.org/wg/httpbis/trac/changeset/687>.

It appears that we *do* have consensus for disallowing controls in 
quoted-pairs, thus for:

   quoted-pair    = "\" ( WSP / VCHAR / obs-text )

However, if that's all that we do we won't have addresses issue #173 
after all.

Proposal:

- add a new issue for disallowing CTLs in quoted-pair

- address #173 by tuning the definition of chunk-ext-val

BR, Julian
Received on Thursday, 27 August 2009 12:04:15 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:08 GMT