[Bug 10410] On getting, should the UA percent-decode? Firefox seems to say yes, Chrome/Opera no, at least for the hash. Test case (save and visit with some percent-encoded fragment): data:text/html,<!doctype html><script>alert(document.location.hash);</script> from bugzilla@jessica.w3.org on 2010-08-25 (public-html-bugzilla@w3.org from August 2010)

From: <bugzilla@jessica.w3.org>
Date: Wed, 25 Aug 2010 12:05:55 +0000
To: public-html-bugzilla@w3.org
Message-Id: <E1OoEjr-0006K2-HC@jessica.w3.org>

http://www.w3.org/Bugs/Public/show_bug.cgi?id=10410


Henri Sivonen <hsivonen@iki.fi> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |hsivonen@iki.fi




--- Comment #1 from Henri Sivonen <hsivonen@iki.fi>  2010-08-25 12:05:54 ---
Note that Gecko is buggy here
https://bugzilla.mozilla.org/show_bug.cgi?id=582361 and has a temporary
workaround for Firefox 4, since the real fix didn't fit in the release
schedule.

-- 
Configure bugmail: http://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

Received on Wednesday, 25 August 2010 12:05:57 UTC