- From: Matt Menke <notifications@github.com>
- Date: Wed, 21 Nov 2018 08:23:13 -0800
- To: whatwg/fetch <fetch@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Wednesday, 21 November 2018 16:23:34 UTC
MattMenke2 commented on this pull request. > + <p><a for=list>For each</a> <var>value</var> of <var>values</var>: + + <ol> + <li><p>Set <var>mimeType</var> to the result of <a lt="parse a MIME type">parsing</a> + <var>value</var>. + + <li><p>If <var>mimeType</var> is failure, then <a for=iteration>continue</a>. + + <li> + <p>If <var>mimeType</var>'s <a for="MIME type">essence</a> is not "<code>*/*</code>" or + <var>essence</var>, then: + + <ol> + <li><p>Set <var>charset</var> to null. + + <li><p>If <var>mimeType</var>'s <a for="MIME type">parameters</a>["<code>charset</code>"] Not sure that skipping over invalid MIME types really costs us much in terms of security, but I'd be perfectly fine with just taking the first line, and ignoring the rest. Downside of that is, as with most every decision here, we just don't know how much of the web that breaks. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/whatwg/fetch/pull/831#discussion_r235455240
Received on Wednesday, 21 November 2018 16:23:34 UTC