- From: Adam Rice <notifications@github.com>
- Date: Fri, 10 Mar 2023 01:15:00 -0800
- To: whatwg/url <url@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Friday, 10 March 2023 09:15:13 UTC
I made an example where giving the special non-special scheme treatment to a `javascript:` URL results in different behaviour:
`javascript://host/1%0a//../0/;alert('non-opaque path');/%0aalert('opaque path');/..///`
https://jsdom.github.io/whatwg-url/#url=amF2YXNjcmlwdDovL2hvc3QvMSUwYS8vLi4vMC87YWxlcnQoJ25vbi1vcGFxdWUgcGF0aCcpOy8lMGFhbGVydCgnb3BhcXVlIHBhdGgnKTsvLi4vLy8=&base=YWJvdXQ6Ymxhbms=
This is obviously a very contrived example, but it illustrates that applying non-special treatment to `javascript:` URLs is surprising.
--
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/url/issues/307#issuecomment-1463502348
You are receiving this because you are subscribed to this thread.
Message ID: <whatwg/url/issues/307/1463502348@github.com>
Received on Friday, 10 March 2023 09:15:13 UTC