Re: #173: CR and LF in chunk extension values

tor 2009-08-27 klockan 14:03 +0200 skrev Julian Reschke:

> It appears that we *do* have consensus for disallowing controls in 
> quoted-pairs, thus for:
> 
>    quoted-pair    = "\" ( WSP / VCHAR / obs-text )

Yes.

> However, if that's all that we do we won't have addresses issue #173 
> after all.

Indeed.

> Proposal:
> 
> - add a new issue for disallowing CTLs in quoted-pair

Yes.

> - address #173 by tuning the definition of chunk-ext-val

Which means defining a new variant of quoted-string which do not allow
for folding for use in chunk-ext-val.

    chunk-ext-val    = token / quoted-string-nf
    quoted-string-nf = DQUOTE *( qdtext-nf / quoted-pair ) DQUOTE
    qdtext-nf        = WSP / %x21 / %x23-5B / %x5D-7E / obs-text
                     ; WSP / <VCHAR except DQUOTE and "\"> / obs-text 


assuming quoted-pair is fixed as discussed.

Perhaps is should also be noted in text that folding is explicitly forbidden in chunk headers.

Comments are thankfully not allowed in chunk extensions from what I can tell.

Regards
Henrik