- From: Jeffrey Yasskin <notifications@github.com>
- Date: Thu, 21 Mar 2019 20:06:00 -0700
- To: whatwg/url <url@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Friday, 22 March 2019 03:06:23 UTC
jyasskin commented on this pull request. > -<p>Due to the confusion that can arise between a <a for=/>URL</a>'s <a for=url>host</a> -and <a for=url>path</a> with bidirectional text, browsers are encouraged to only render a -<a for=/>URL</a>'s <a for=url>host</a> in places where it is important for users to -distinguish between the two. E.g., users are expected to make trust decisions based on a -<a for=/>URL</a>'s <a for=url>host</a> rendered in the address bar. + <li><p>URLs are particularly prone to confusion between host and path when they contain + bidirectional text, so in this case it is particularly advisable to only render a URL’s <a + for=url>host</a>. Other parts of the <a for=/>URL</a>, if rendered, should have their sequences of + <a>percent-encoded bytes</a> replaced with code points resulting from <a>percent decoding</a> those It might help to put "Other parts of the URL …" in a separate `<li>` since it's a good idea but doesn't help with de-confusing the host and path. I don't feel strongly about this. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/whatwg/url/pull/434#discussion_r268025623
Received on Friday, 22 March 2019 03:06:23 UTC