W3C home > Mailing lists > Public > public-webappsec@w3.org > November 2014

Re: [CSP] URI/IRI normalization and comparison

From: Anne van Kesteren <annevk@annevk.nl>
Date: Mon, 10 Nov 2014 09:53:49 +0100
Message-ID: <CADnb78j9uSv8j6=ZJLqR58LrQK5xSo_-UaNq43oYF2Zvmuxhxg@mail.gmail.com>
To: Brian Smith <brian@briansmith.org>
Cc: "public-webappsec@w3.org" <public-webappsec@w3.org>
On Mon, Nov 10, 2014 at 2:18 AM, Brian Smith <brian@briansmith.org> wrote:
> Header encoding is defined in the HTTP specification. Also, there are
> about 3 million emails on the HTTP WG mailing list about this topic.

As far as I know that's false. Legacy headers are decoded per
"original latin1". For new headers you need to specify it. Of course,
that completely fails with generic APIs, I'm not sure if they
considered that.

Received on Monday, 10 November 2014 08:54:16 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:54:42 UTC