[Bug 10410] New: On getting, should the UA percent-decode? Firefox seems to say yes, Chrome/Opera no, at least for the hash. Test case (save and visit with some percent-encoded fragment): data:text/html,<!doctype html><script>alert(document.location.hash);</script>

http://www.w3.org/Bugs/Public/show_bug.cgi?id=10410

           Summary: On getting, should the UA percent-decode?  Firefox
                    seems to say yes, Chrome/Opera no, at least for the
                    hash.  Test case (save and visit with some
                    percent-encoded fragment): data:text/html,<!doctype
                    html><script>alert(document.location.hash);</script>
           Product: HTML WG
           Version: unspecified
          Platform: Other
               URL: http://www.whatwg.org/specs/web-apps/current-work/#int
                    erfaces-for-url-manipulation
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P3
         Component: HTML5 spec (editor: Ian Hickson)
        AssignedTo: ian@hixie.ch
        ReportedBy: contributor@whatwg.org
         QAContact: public-html-bugzilla@w3.org
                CC: mike@w3.org, public-html@w3.org


Section:
http://www.whatwg.org/specs/web-apps/current-work/#interfaces-for-url-manipulation

Comment:
On getting, should the UA percent-decode?  Firefox seems to say yes,
Chrome/Opera no, at least for the hash.  Test case (save and visit with some
percent-encoded fragment): data:text/html,<!doctype
html><script>alert(document.location.hash);</script>

Posted from: 68.175.61.233

-- 
Configure bugmail: http://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

Received on Friday, 20 August 2010 17:34:42 UTC