[whatwg/url] Should we escape \ in non-special non-opaque paths? (Issue #675)

Pros:
* Matches RFC 3986 and Go
* Might reduce path traversal vulnerabilities, for implementations that allow switching URLs from non-special to special schemes (i.e., all browsers)

Cons:
* Doesn't match any browser (though to be fair, Chrome and Firefox don't actually support non-opaque paths in non-special URLs, and Safari implements the current spec)

----

Originally suggested by @karwa in https://github.com/whatwg/url/issues/651#issuecomment-975891834.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/url/issues/675