* WGs marked with an * asterisk has had at least one new draft made available during the last 5 days

Ticket #173 (closed design: fixed)

Opened 5 years ago

Last modified 5 years ago

CR and LF in chunk extension values

Reported by: mnot@pobox.com Owned by:
Priority: urgent Milestone: 08
Component: p1-messaging Severity: Active WG Document
Keywords: Cc:
Origin: http://www.w3.org/mid/8c9i35lqt4emjvehljl60gd3apgq5obuqa@hive.bjoern.hoehrmann.de

Description

A chunk extension value is defined as either token or quoted-string. A

quoted-string allows CRs and LFs for folding and in escaped form under RFC 2616; we have since outlawed the escaped form, and in headers, but not chunk extension values, we now outlaw producing them for folding as- well. Accepting and processing the latter correctly still appears to be a SHOULD level requirement; I am not sure about the former.

It appears that implementations usually just read a line and ignore any- thing after the first ";" character at the beginning of a chunk. Perhaps the specification should use a CRLF-free quoted-string instead for this; if not, the considerations for obs-fold should apply to chunk extension values aswell, or obs-fold should not be used for chunk extension values (which would require a separate quoted-string production aswell).

Attachments

173.diff (5.1 KB) - added by julian.reschke@gmx.de 5 years ago.
Proposed patch for part 1.

Change History

comment:1 Changed 5 years ago by mnot@pobox.com

  • Priority set to normal

Proposal: remove /r /n from quoted-string altogether (i.e., in all uses, not just chunk-ext)

comment:2 Changed 5 years ago by mnot@pobox.com

  • Priority changed from normal to urgent

comment:3 Changed 5 years ago by mnot@pobox.com

No objection to proposal in the room at Stockholm meeting

comment:4 Changed 5 years ago by mnot@pobox.com

  • Milestone changed from unassigned to 08

comment:5 Changed 5 years ago by mnot@pobox.com

1) Replace OWS in qdtext with space and tab, and 2) Remove obs-text from qdtext, and 3) Restrict quoted-text to VCHAR.

Changed 5 years ago by julian.reschke@gmx.de

Proposed patch for part 1.

comment:6 Changed 5 years ago by julian.reschke@gmx.de

From [686]:

disallow all control characters except HTAB in comments and quoted-string (see #173)

comment:7 Changed 5 years ago by julian.reschke@gmx.de

From [687]:

Undo last change [686] (see #173)

comment:8 Changed 5 years ago by julian.reschke@gmx.de

From [707]:

Disallow line folding in chunk extensions (see #173)

comment:9 Changed 5 years ago by mnot@pobox.com

  • Status changed from new to closed
  • Resolution set to fixed
Note: See TracTickets for help on using tickets.