[Webkit-unassigned] [Bug 16179] any attribute name start with a unicode which like #xx00(x could be any hex number[0-9a-f]) will cause HTMLTokenizer parse error.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Dec 6 22:37:26 PST 2007


http://bugs.webkit.org/show_bug.cgi?id=16179





------- Comment #12 from ap at webkit.org  2007-12-06 22:37 PDT -------
(In reply to comment #11)
> Alexey informed me that there may be some security concerns with supporting
> these additional characters in tag and attribute names. I don't know the
> details yet. Alexey would you be willing to comment?

I tried to say that treating U+3000 as whitespace could be dangerous, referring
to the comment that "some Chinese websites use one Chinese space symbol +U3000
as space to separate attribute name/value group" - I'm not aware of any issues
with treating them as non-whitespace.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list