[Webkit-unassigned] [Bug 21978] New: KURL should not allow "%00" in paths

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=21978

           Summary: KURL should not allow "%00" in paths
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Platform
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: brettw at chromium.org


IE prevents URLs with paths containing "%00" from being loaded or interpreted
in any way. I assume this is to prevent possible bad things from happening at
the OS layer or from poorly written servers.

Firefox supports it, but you can not give much argument for supporting it if IE
doesn't. In WebKit, this bug is much worse because of bug 21975. I think the
unescaping should be prohibited along with not allowing %00 in path names in
the first place.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.