- From: Anne van Kesteren <notifications@github.com>
- Date: Fri, 28 Oct 2016 02:56:16 -0700
- To: whatwg/url <url@noreply.github.com>
Received on Friday, 28 October 2016 09:57:13 UTC
It seems we avoid most issues here by simply not percent-decoding (other than host, where a one-time decode pass followed by IDNA is fine as it will return failure if anything fails). My conclusion here is to embrace the suggestion in https://github.com/whatwg/url/issues/87#issuecomment-256124153 to only work with double-dot path segments and single-dot path segments and not decode %2e generally (or anything else). We need to make sure that is covered by the testsuite. Gecko will need to WONTFIX https://bugzilla.mozilla.org/show_bug.cgi?id=1197123 (action item for @valenting I think). Chrome and Edge will have to change their behavior. I think in the end that will turn out to be a drastic code simplification for them since they no longer have to worry about cases such as `%%300`. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/whatwg/url/issues/87#issuecomment-256882205
Received on Friday, 28 October 2016 09:57:13 UTC