Re: [whatwg/fetch] Prevent requests to HTTP(S) URLs containing raw `\n` and `<`. (#546) from Anne van Kesteren on 2023-05-31 (public-webapps-github@w3.org from May 2023)

From: Anne van Kesteren <notifications@github.com>
Date: Wed, 31 May 2023 11:28:01 -0700
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/546/1570711734@github.com>

@domenic is correct that you'll have to review all the callers and all the callers of the URL parser algorithm and ensure it all lines up with the goals of this feature. And where it doesn't, you'll have to make changes to account for that. I'm not sure if it's easier to start out with this algorithm can fix the couple cases that are wrong or start with something new.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/546#issuecomment-1570711734
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/issues/546/1570711734@github.com>

Received on Wednesday, 31 May 2023 18:28:07 UTC