W3C home > Mailing lists > Public > public-media-fragment@w3.org > March 2010

Re: Percent encoding

From: RaphaŽl Troncy <raphael.troncy@eurecom.fr>
Date: Tue, 02 Mar 2010 23:33:08 +0100
Message-ID: <4B8D9224.1040408@eurecom.fr>
To: Philip Jšgenstedt <philipj@opera.com>
CC: RaphaŽl Troncy <raphael.troncy@cwi.nl>, Silvia Pfeiffer <silviapfeiffer1@gmail.com>, Media Fragment <public-media-fragment@w3.org>, Jack Jansen <Jack.Jansen@cwi.nl>
>> Thanks, the note is indeed really useful. For all the following
>> statements, do you think it is possible to indicate a suitable reference?
>
> Do you mean like a reference in the spec?

I meant a pointer to a document whenever applicable ...

>> * "&" is the only primary separator for name-value pairs, but some
>> server-side languages also treat ";" as a separator.
>
> CGI Perl also accepts ";" as a separator.

... So let's add a pointer to CGI Perl doc.

>> * name-value pairs with invalid percent-encoding should be ignored,
>> but some server-side languages silently mask such errors.
>
> Of the tested, only JSP outright rejected invalid input like our spec
> does. Of ASP, PHP and Perl CGI, some removed the invalid part and some
> simply left them intact, but I can't remember exactly which did which.

Useful warning indeed

>> * The "+" character should not be treated specially, but some
>> server-side languages replace it with a space (" ") character.
>
> All of the tested languages do this, it's just how query fragments are
> used. We could duplicate this behavior, but since we actually have
> syntax that requires using "+" (timezones) it would be quite annoying.

Useful warning indeed

>> * Multiple occurrences of the same name must be preserved, but some
>> server-side languages only preserve the last occurrence.
>
> Here again I can't remember the exact behavior of each language. I'm
> pretty sure PHP and CGI Perl only preserve the last occurence, while JSP
> has a list. I'm not sure about ASP and ASP.NET.
>
> If it essential that the exact results are available I could try digging
> out the scripts from the VirtualBox images I set up for testing.

I think it is fine like that.

   RaphaŽl

-- 
RaphaŽl Troncy
EURECOM, Multimedia Communications Department
2229, route des CrÍtes, 06560 Sophia Antipolis, France.
e-mail: raphael.troncy@eurecom.fr & raphael.troncy@gmail.com
Tel: +33 (0)4 - 9300 8242
Fax: +33 (0)4 - 9000 8200
Web: http://www.eurecom.fr/~troncy/
Received on Tuesday, 2 March 2010 22:34:20 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Wednesday, 21 September 2011 12:13:38 GMT