Re: [whatwg/url] Single and double dot segments in paths cannot be represented – Premature decoding of %2e character sequences. (#281)

Thanks. 

For the record, I do think the solution is somewhat unsatisfactory. I appreciate the safety issue, but I'm not sure about the tradeoff, nor the effectiveness. Servers that fall for such an attack may fall for `http://example.com/..%2fsensitive_info.txt` as well, for example. 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/url/issues/281#issuecomment-289406903