W3C home > Mailing lists > Public > ietf-http-wg@w3.org > July to September 2014

Rejecting messages with illegal characters in header fields (was Re: h2 header field names)

From: Martin Thomson <martin.thomson@gmail.com>
Date: Thu, 4 Sep 2014 11:20:14 -0700
Message-ID: <CABkgnnU1Uw-Ah1Z+aHat8C3yvE-NZ1c7MiQyq33Af38MfJpZmA@mail.gmail.com>
To: Julian Reschke <julian.reschke@gmx.de>
Cc: "Roy T. Fielding" <fielding@gbiv.com>, HTTP Working Group <ietf-http-wg@w3.org>
On 3 September 2014 23:53, Julian Reschke <julian.reschke@gmx.de> wrote:
> Wait! Percent-Encoded?

OK, then we treat header field values containing forbidden characters
as malformed?  That invalidates a non-zero number of requests that our
various test runs have detected, I think.  Are we OK with that?  I am,
but I'm not as naturally conservative as some folks here.
Received on Thursday, 4 September 2014 18:20:42 UTC

This archive was generated by hypermail 2.3.1 : Wednesday, 30 March 2016 09:57:10 UTC