W3C home > Mailing lists > Public > ietf-http-wg@w3.org > July to September 2009

Issue 194: restricting allowed characters in quoted-pair

From: Julian Reschke <julian.reschke@gmx.de>
Date: Fri, 28 Aug 2009 11:35:01 +0200
Message-ID: <4A97A4C5.6070801@gmx.de>
To: "Roy T. Fielding" <fielding@gbiv.com>
CC: Henrik Nordstrom <henrik@henriknordstrom.net>, Mark Nottingham <mnot@mnot.net>, HTTP Working Group <ietf-http-wg@w3.org>, Bjoern Hoehrmann <derhoermi@gmx.net>
Roy T. Fielding wrote:
> On Aug 27, 2009, at 5:03 AM, Julian Reschke wrote:
>> It appears that we *do* have consensus for disallowing controls in 
>> quoted-pairs, thus for:
>>
>>   quoted-pair    = "\" ( WSP / VCHAR / obs-text )
>>
>> However, if that's all that we do we won't have addresses issue #173 
>> after all.
>>
>> Proposal:
>>
>> - add a new issue for disallowing CTLs in quoted-pair
> 
> I suggest we make the issue "Disallow quoted-pair productions that are
> never used in practice nor needed for parsing", with the fix being
> 
>    quoted-pair    = "\" ( "\" / DQUOTE / "(" / ")" )
> 
 > ...

- I have opened issue #194 for this.

- Restricting it to only these four characters is attractive, but may 
break content where people quoted too defensively.

BR, Julian
Received on Friday, 28 August 2009 09:35:48 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:08 GMT