Re: [whatwg/url] Basic URL parse requires stripping tabs before host state is entered, allowing bad hosts (Issue #829) from Anne van Kesteren on 2024-08-13 (public-webapps-github@w3.org from August 2024)

From: Anne van Kesteren <notifications@github.com>
Date: Tue, 13 Aug 2024 00:53:05 -0700
To: whatwg/url <url@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/url/issues/829/2285591480@github.com>

It can reach the host parser when that is directly invoked. E.g., that is why `document.domain = "\texample.com"` throws on `https://example.com`.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/url/issues/829#issuecomment-2285591480
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/url/issues/829/2285591480@github.com>

Received on Tuesday, 13 August 2024 07:53:09 UTC