- From: Julian Reschke <julian.reschke@gmx.de>
- Date: Wed, 07 Dec 2011 11:38:54 +0100
- To: Amos Jeffries <squid3@treenet.co.nz>
- CC: ietf-http-wg@w3.org
On 2011-12-07 11:30, Amos Jeffries wrote: > ... >> If "path" does this in Digest for WWW-Authenticate, then Digest is >> broken and we should raise an erratum. > > Err. double-checking myself that parameter name was "uri=" I was > recalling from bad experiences ... > with WebKit (Chrome) http://bugs.squid-cache.org/show_bug.cgi?id=3077#c3 > and Gecko (Firefox) http://bugs.squid-cache.org/show_bug.cgi?id=3077#c9 ...where's the definition for "uri"? > Arguably the RFC 2617 does not explicitly mention quotes in the > definition and one can argue that they should not have placed the "" > around the value. Still, its happening anyway. That should be reported as bug. > On the Digest challenge header "domain=" explicitly defines use of > quotes ( <"> absoluteURI | abs_path <"> ), again with no mention what to > do with the quoted-pair escape character which MAY be in the URI > query-string portion (RFC 2396 emphasis). This one has not been sighted > (yet) AFAIK. That's almost a bug in 2617; except that - unless I'm missing something - \ us invalid in URIs (yes, in 2396 as well). Best regards, Julian
Received on Wednesday, 7 December 2011 10:39:37 UTC