- From: Anne van Kesteren <notifications@github.com>
- Date: Thu, 21 Mar 2019 09:25:27 -0700
- To: whatwg/url <url@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Thursday, 21 March 2019 16:25:51 UTC
annevk commented on this pull request. > -<p>Due to the confusion that can arise between a <a for=/>URL</a>'s <a for=url>host</a> -and <a for=url>path</a> with bidirectional text, browsers are encouraged to only render a -<a for=/>URL</a>'s <a for=url>host</a> in places where it is important for users to -distinguish between the two. E.g., users are expected to make trust decisions based on a -<a for=/>URL</a>'s <a for=url>host</a> rendered in the address bar. + <li><p>URLs are particularly prone to confusion between host and path when they contain + bidirectional text, so in this case it is particularly advisable to only render a URL’s <a + for=url>host</a>. Other parts of the <a for=/>URL</a>, if rendered, should have their sequences of + <a>percent-encoded bytes</a> replaced with code points resulting from <a>percent decoding</a> those I guess it depends on how much we expect the path/query/fragment to show up going forward. It's definitely a little fragile to decode as the browser will later have to encode it again when going to the network. Differences there could result in issues (and have). -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/whatwg/url/pull/434#discussion_r267844368
Received on Thursday, 21 March 2019 16:25:51 UTC