Re: #173: CR and LF in chunk extension values

Now that we've dealt with allowed characters in quoted pairs <http://trac.tools.ietf.org/wg/httpbis/trac/ticket/194 
 >, can we wrap this one up too? Julian, does your proposal need to be  
modified?

<http://trac.tools.ietf.org/wg/httpbis/trac/ticket/173>



On 28/08/2009, at 9:28 AM, Henrik Nordstrom wrote:

> tor 2009-08-27 klockan 14:03 +0200 skrev Julian Reschke:
>
>> It appears that we *do* have consensus for disallowing controls in
>> quoted-pairs, thus for:
>>
>>   quoted-pair    = "\" ( WSP / VCHAR / obs-text )
>
> Yes.
>
>> However, if that's all that we do we won't have addresses issue #173
>> after all.
>
> Indeed.
>
>> Proposal:
>>
>> - add a new issue for disallowing CTLs in quoted-pair
>
> Yes.
>
>> - address #173 by tuning the definition of chunk-ext-val
>
> Which means defining a new variant of quoted-string which do not allow
> for folding for use in chunk-ext-val.
>
>    chunk-ext-val    = token / quoted-string-nf
>    quoted-string-nf = DQUOTE *( qdtext-nf / quoted-pair ) DQUOTE
>    qdtext-nf        = WSP / %x21 / %x23-5B / %x5D-7E / obs-text
>                     ; WSP / <VCHAR except DQUOTE and "\"> / obs-text
>
>
> assuming quoted-pair is fixed as discussed.
>
> Perhaps is should also be noted in text that folding is explicitly  
> forbidden in chunk headers.
>
> Comments are thankfully not allowed in chunk extensions from what I  
> can tell.
>
> Regards
> Henrik
>
>


--
Mark Nottingham     http://www.mnot.net/

Received on Tuesday, 6 October 2009 04:43:17 UTC