W3C home > Mailing lists > Public > public-webappsec@w3.org > June 2013

Re: Possible bug in algorithm to match a source expression?

From: Adam Barth <w3c@adambarth.com>
Date: Sat, 22 Jun 2013 21:30:11 -0700
Message-ID: <CAJE5ia_17Q2Kj3vFTY1fRmQSi6=ER1D7J3-3Qw87W_iPwn3GVg@mail.gmail.com>
To: James Marshall <james@jmarshall.com>
Cc: "public-webappsec@w3.org" <public-webappsec@w3.org>
On Sat, May 11, 2013 at 4:50 PM, James Marshall <james@jmarshall.com> wrote:
> In section 3.2.2.2 (matching a source expression), I believe step 4.6 should
> start with "If the first character of the source expression's host is not an
> U+002A ASTERISK character (*) and..." .  Otherwise, a URI of
> "http://www.example.com" would not match a source expression of
> "http://*.example.com", since step 4.6 would return "does not match".

Quite so.  Fixed in both 1.0 and 1.1.

Adam
Received on Sunday, 23 June 2013 04:31:11 UTC

This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:02 UTC