Issue 1912: URL escaping doesn't follow the RFC
http://code.google.com/p/chromium/issues/detail?id=1912
New issue report by AEGarbutt:
Product Version : 0.2.149.29 (1798)
URLs (if applicable) :
Other browsers tested:
Add OK or FAIL after other browsers where you have tested this issue:
Safari 3: OK
Firefox 3: OK
IE 7: FAIL
What steps will reproduce the problem?
1. Type in a URL that contains a character that doesn't fall into the
'unreserved' or 'reserved' character sets. This can be in the query portion
of the URL. (e.g. < > " { } | \ ^ [ ] `)
2. Submit the request
3. Observe with a network sniffer (wireshark) or intervening proxy
(webscarab) that none of the characters were URL escaped.
What is the expected result?
The browser should URL escape all characters that do not fall into the
unreserved character set as defined in RFC2396.
What happens instead?
The browser only URL encodes the space character as %20
Please provide any additional information below. Attach a screenshot if
possible.
According to the RFC (http://www.ietf.org/rfc/rfc2396.txt):
Data must be escaped if it does not have a representation using an
unreserved character; this includes data that does not correspond to
a printable character of the US-ASCII coded character set, or that
corresponds to any US-ASCII character that is disallowed, as
explained below.
and unreserved characters are of the set:
unreserved = alphanum | mark
mark = "-" | "_" | "." | "!" | "~" | "*" | "'" | "(" | ")"
This issue is especially problematic if a site echoes the URL of the
request back in to the page unescaped because they assume that it has
already been URL escaped by the browser. Maybe not a good assumption, but
it happens.
Issue attributes:
Status: Unconfirmed
Owner: [EMAIL PROTECTED]
Labels: Type-Bug Pri-2 OS-All Area-Unknown
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Chromium-bugs" group.
To post to this group, send email to chromium-bugs@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/chromium-bugs?hl=en
-~----------~----~----~----~------~----~------~--~---
