W3C home > Mailing lists > Public > ietf-http-wg@w3.org > July to September 2009

Re: Issue 194: restricting allowed characters in quoted-pair

From: Mark Nottingham <mnot@mnot.net>
Date: Wed, 16 Sep 2009 15:43:53 +1000
Cc: "Roy T. Fielding" <fielding@gbiv.com>, Henrik Nordstrom <henrik@henriknordstrom.net>, HTTP Working Group <ietf-http-wg@w3.org>, Bjoern Hoehrmann <derhoermi@gmx.net>
Message-Id: <6B2FB024-6391-411F-BEDF-4600623AA9D2@mnot.net>
To: Julian Reschke <julian.reschke@gmx.de>
Yeah, what Julian said; I'd like to do this, but am concerned about  
what it would mean.

Can we keep it (relatively) open in BNF, and caution against quoting  
anything but DQUOTE in prose?

Not a great solution, but...


On 28/08/2009, at 7:35 PM, Julian Reschke wrote:

> Roy T. Fielding wrote:
>> On Aug 27, 2009, at 5:03 AM, Julian Reschke wrote:
>>> It appears that we *do* have consensus for disallowing controls in  
>>> quoted-pairs, thus for:
>>>
>>>  quoted-pair    = "\" ( WSP / VCHAR / obs-text )
>>>
>>> However, if that's all that we do we won't have addresses issue  
>>> #173 after all.
>>>
>>> Proposal:
>>>
>>> - add a new issue for disallowing CTLs in quoted-pair
>> I suggest we make the issue "Disallow quoted-pair productions that  
>> are
>> never used in practice nor needed for parsing", with the fix being
>>   quoted-pair    = "\" ( "\" / DQUOTE / "(" / ")" )
> > ...
>
> - I have opened issue #194 for this.
>
> - Restricting it to only these four characters is attractive, but  
> may break content where people quoted too defensively.
>
> BR, Julian
>


--
Mark Nottingham     http://www.mnot.net/
Received on Wednesday, 16 September 2009 05:44:34 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:10 GMT