Re: [whatwg/url] Forbidden host code points should include all C0 controls & U+007F (#627) from Timothy Gu on 2021-10-20 (public-webapps-github@w3.org from October 2021)

From: Timothy Gu <notifications@github.com>
Date: Wed, 20 Oct 2021 13:43:28 -0700
To: whatwg/url <url@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/url/issues/627/948021767@github.com>

@achristensen07 `new URL('https://a\u0007f.com')` is `a` U+0007 `f`, while `'a' + String.fromCodePoint(0x7F)` is `a` U+007F.

I guess I was wrong in my initial post (which I've just updated): Firefox forbids `%00`–`%1F`, `%7F`, and `\u0000`–`\u001F`. It does not forbid `\u007F`. Chrome forbids all of these.

I propose that we follow Chrome here as it's more consistent.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/url/issues/627#issuecomment-948021767

Received on Wednesday, 20 October 2021 20:43:40 UTC