Re: Possible bug in algorithm to match a source expression? from Adam Barth on 2013-06-23 (public-webappsec@w3.org from June 2013)

From: Adam Barth <w3c@adambarth.com>
Date: Sat, 22 Jun 2013 21:30:11 -0700
To: James Marshall <james@jmarshall.com>
Cc: "public-webappsec@w3.org" <public-webappsec@w3.org>
Message-ID: <CAJE5ia_17Q2Kj3vFTY1fRmQSi6=ER1D7J3-3Qw87W_iPwn3GVg@mail.gmail.com>

On Sat, May 11, 2013 at 4:50 PM, James Marshall <james@jmarshall.com> wrote:
> In section 3.2.2.2 (matching a source expression), I believe step 4.6 should
> start with "If the first character of the source expression's host is not an
> U+002A ASTERISK character (*) and..." .  Otherwise, a URI of
> "http://www.example.com" would not match a source expression of
> "http://*.example.com", since step 4.6 would return "does not match".

Quite so.  Fixed in both 1.0 and 1.1.

Adam

Received on Sunday, 23 June 2013 04:31:11 UTC