- From: Anne van Kesteren <annevk@annevk.nl>
- Date: Wed, 6 Mar 2013 09:22:21 +0000
- To: WebApps WG <public-webapps@w3.org>
- Cc: Alexey Proskuryakov <ap@webkit.org>, Arun Ranganathan <arun@mozilla.com>, Jonas Sicking <jonas@sicking.cc>
Okay, so given https://bugs.webkit.org/show_bug.cgi?id=111380 I think we should put at least minimal restrictions on Blob's constructor concerning Blob.type. We made it "anything goes" because in theory with Content-Type anything goes. But of course that is false and we should have noticed that at the time. Content-Type's value cannot contain CRLF, Content-Type's value is also a byte sequence, not a code point sequence, and certainly not a code unit sequence. 1. I think we should change the type from DOMString to ByteString, just like XMLHttpRequest has it. 2. I think we should either throw or ignore setting it to values that contain CR or LF. 3. Anything I'm missing? -- http://annevankesteren.nl/
Received on Wednesday, 6 March 2013 09:22:49 UTC