- From: Adam Rice <notifications@github.com>
- Date: Fri, 10 Mar 2023 01:15:00 -0800
- To: whatwg/url <url@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Friday, 10 March 2023 09:15:13 UTC
I made an example where giving the special non-special scheme treatment to a `javascript:` URL results in different behaviour: `javascript://host/1%0a//../0/;alert('non-opaque path');/%0aalert('opaque path');/..///` https://jsdom.github.io/whatwg-url/#url=amF2YXNjcmlwdDovL2hvc3QvMSUwYS8vLi4vMC87YWxlcnQoJ25vbi1vcGFxdWUgcGF0aCcpOy8lMGFhbGVydCgnb3BhcXVlIHBhdGgnKTsvLi4vLy8=&base=YWJvdXQ6Ymxhbms= This is obviously a very contrived example, but it illustrates that applying non-special treatment to `javascript:` URLs is surprising. -- Reply to this email directly or view it on GitHub: https://github.com/whatwg/url/issues/307#issuecomment-1463502348 You are receiving this because you are subscribed to this thread. Message ID: <whatwg/url/issues/307/1463502348@github.com>
Received on Friday, 10 March 2023 09:15:13 UTC