- From: Anne van Kesteren <notifications@github.com>
- Date: Wed, 09 Sep 2026 08:44:44 -0700
- To: whatwg/fetch <fetch@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Wednesday, 9 September 2026 15:44:48 UTC
@annevk commented on this pull request.
> +
+<p>A <dfn export for="multipart/form-data" lt="boundary"><code>multipart/form-data</code>
+boundary</dfn> is a <a for=/>byte sequence</a> such that:
+
+<ul>
+ <li><p>its length is greater than 26 and less than 71, and
+
+ <li><p>it is composed by bytes in the ranges 0x30 to 0x39, 0x41 to 0x5A, or 0x61 to 0x7A,
+ inclusive (<a>ASCII alphanumeric</a>), or which are 0x27 ('), 0x2D (-) or 0x5F (_).
+</ul>
+
+<div algorithm>
+<p>To <dfn export for="multipart/form-data/boundary">generate</dfn> a
+<a for="multipart/form-data" lt="boundary"><code>multipart/form-data</code> boundary</a>, return an
+<a>implementation-defined</a> <a for=/>byte sequence</a> which fulfills the conditions for
+boundaries, such that part of it is randomly generated, with a minimum entropy of 95 bits.
I think for now matching implementations makes sense (Gecko indeed seems to have a far higher number) and then separately pursue an improvement on top.
--
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/1922#discussion_r3970350360
You are receiving this because you are subscribed to this thread.
Message ID: <whatwg/fetch/pull/1922/review/5156603553@github.com>
Received on Wednesday, 9 September 2026 15:44:48 UTC