W3C home > Mailing lists > Public > public-webappsec@w3.org > May 2013

Possible bug in algorithm to match a source expression?

From: James Marshall <james@jmarshall.com>
Date: Sat, 11 May 2013 16:50:58 -0700
Message-ID: <CAGEp=f3v_vqipMVwzXr7MFknJ9bp0PmpRtT9yZ9qNpEk5ezvSw@mail.gmail.com>
To: "public-webappsec@w3.org" <public-webappsec@w3.org>
In section 3.2.2.2 (matching a source expression), I believe step 4.6
should start with "If the first character of the source expression's
hostis not an U+002A ASTERISK character (
*) and..." .  Otherwise, a URI of "http://www.example.com" would not match
a source expression of "http://*.example.com", since step 4.6 would return
"does not match".

Thanks,
James
Received on Saturday, 11 May 2013 23:51:26 UTC

This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:01 UTC