W3C home > Mailing lists > Public > ietf-http-wg@w3.org > July to September 2009

Re: #173: CR and LF in chunk extension values

From: Henrik Nordstrom <henrik@henriknordstrom.net>
Date: Fri, 28 Aug 2009 01:28:00 +0200
To: Julian Reschke <julian.reschke@gmx.de>
Cc: Mark Nottingham <mnot@mnot.net>, HTTP Working Group <ietf-http-wg@w3.org>, Bjoern Hoehrmann <derhoermi@gmx.net>
Message-Id: <1251415680.18277.15.camel@henriknordstrom.net>
tor 2009-08-27 klockan 14:03 +0200 skrev Julian Reschke:

> It appears that we *do* have consensus for disallowing controls in 
> quoted-pairs, thus for:
> 
>    quoted-pair    = "\" ( WSP / VCHAR / obs-text )

Yes.

> However, if that's all that we do we won't have addresses issue #173 
> after all.

Indeed.

> Proposal:
> 
> - add a new issue for disallowing CTLs in quoted-pair

Yes.

> - address #173 by tuning the definition of chunk-ext-val

Which means defining a new variant of quoted-string which do not allow
for folding for use in chunk-ext-val.

    chunk-ext-val    = token / quoted-string-nf
    quoted-string-nf = DQUOTE *( qdtext-nf / quoted-pair ) DQUOTE
    qdtext-nf        = WSP / %x21 / %x23-5B / %x5D-7E / obs-text
                     ; WSP / <VCHAR except DQUOTE and "\"> / obs-text 


assuming quoted-pair is fixed as discussed.

Perhaps is should also be noted in text that folding is explicitly forbidden in chunk headers.

Comments are thankfully not allowed in chunk extensions from what I can tell.

Regards
Henrik
Received on Thursday, 27 August 2009 23:28:50 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:08 GMT