[Webkit-unassigned] [Bug 8770] New: XMLHttpRequest should strip CR/LF characters from the URL

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=8770

           Summary: XMLHttpRequest should strip CR/LF characters from the
                    URL
           Product: WebKit
           Version: 420+ (nightly)
          Platform: Macintosh
        OS/Version: Mac OS X 10.4
            Status: NEW
          Severity: normal
          Priority: P2
         Component: XML
        AssignedTo: webkit-unassigned at opendarwin.org
        ReportedBy: ap at nypop.com


I've just debugged a problem with a Web forum that didn't work in Safari
because a CR/LF sequence managed to get into the request URL. Firefox (and,
presumably, WinIE) strip CRLF characters rather than percent-encode them.

Should investigate what other characters need to be stripped, and whether this
applies to URLs other than those used in XMLHttpRequest.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.