Re: [whatwg/encoding] Big5 encoding mishandles some trailing bytes, with possible XSS (#171) from Anne van Kesteren on 2019-01-24 (public-webapps-github@w3.org from January 2019)

From: Anne van Kesteren <notifications@github.com>
Date: Thu, 24 Jan 2019 00:29:05 -0800
To: whatwg/encoding <encoding@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/encoding/issues/171/457109551@github.com>

Heya, welcome!

This is by design to avoid allowing attackers to use this to prevent ASCII delimiters from being seen.

I took some time to find the rationale to make sure we're all on the same page going forward:
* https://bugzilla.mozilla.org/show_bug.cgi?id=690225
* https://www.w3.org/Bugs/Public/show_bug.cgi?id=19961

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/encoding/issues/171#issuecomment-457109551

Received on Thursday, 24 January 2019 08:29:26 UTC