Re: [whatwg/url] Punycode behavior for labels exceeding DNS length is ill-defined (Issue #824) from Henri Sivonen on 2024-03-01 (public-webapps-github@w3.org from March 2024)

From: Henri Sivonen <notifications@github.com>
Date: Fri, 01 Mar 2024 04:11:40 -0800
To: whatwg/url <url@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/url/issues/824/1973079676@github.com>

Hmm. Even with the error condition of counting encode _output_ units, there should still be a limit on encode _input_ units to avoid denial of service. I haven’t even tried doing the math of what the tight bound there would be.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/url/issues/824#issuecomment-1973079676
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/url/issues/824/1973079676@github.com>

Received on Friday, 1 March 2024 12:11:44 UTC