Re: [whatwg/xhr] Why does headers-normalize-response.htm expect null bytes to be allowed? (#165) from Mark Nottingham on 2017-10-19 (public-webapps-github@w3.org from October 2017)

From: Mark Nottingham <notifications@github.com>
Date: Thu, 19 Oct 2017 05:40:38 +0000 (UTC)
To: whatwg/xhr <xhr@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/xhr/issues/165/337805050@github.com>

FWIW, corresponding HTTP spec is `field-value`:
  http://httpwg.org/specs/rfc7230.html#header.fields

`VCHAR` gets you 0x21-7E, `field-content` adds in 0x20 and 0x09, and `obs-text` gets you 0x80-FF. 

`obs-fold` gets you 0x0A and 0x0D in certain patterns (but you can also add that they're automagically folded in, which probably makes the best sense).

That means HTTP doesn't like 0x00-09 and 0x0A-1F.

Anybody have data about how often they're seen in the wild?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/xhr/issues/165#issuecomment-337805050

Received on Thursday, 19 October 2017 05:41:02 UTC