Invalid Characters in URLs

Howdy Folks,

We've been doing some work lately to tighten up our HTTP spec compliance,
specifically around invalid characters in URLs
<https://quiche.googlesource.com/quiche/+/4249f8025caed1e3d71d04d9cadf42251acb7cac/quiche/balsa/header_properties.h#54>.
Perhaps not surprisingly, we've seen many request which include one or more
of the following character, which are prohibited by RFC 3986: *[]{}|^*

Presumably other implementers see this as well? RFC 3986 came out in 2005
and I suspect the web has evolved significantly since then. In much the
same way the WG is addressing the issue of invalid characters in Cookies as
part of rfc6265bis, is there any appetite in the WG for addressing the
issue of invalid characters in URLs?

Cheers,

Ryan

Received on Thursday, 19 September 2024 20:09:04 UTC