[Webkit-unassigned] [Bug 147445] Validation in isValidHTTPHeaderValue is too sensitive.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Aug 5 09:08:09 PDT 2015


https://bugs.webkit.org/show_bug.cgi?id=147445

--- Comment #17 from Alexey Proskuryakov <ap at webkit.org> ---
> If we split the sub-issues, that would give:
> 1. Add support for trimming whitespaces in XHR.setRequestHeader

I'm not sure if that would be an observable change in behavior given the below...

> 2. Ensure XHR can set a header with an empty value

I think that this should raise an exception.

> 3. Ensure XHR can set "Content-Type" with an empty value

Ditto.

> 4. Decide what to do about empty values in the context of XHR combine rule.

I remember that there was some discussion about which header field values to combine, and which to replace. We may even have a bugzilla bug.

This doesn't seem too important, as it would only affect authors who actively tried to shoot themselves in the foot by setting the same header multiple times, and expecting that to override the value.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150805/2dfc9edf/attachment.html>


More information about the webkit-unassigned mailing list