On 7/1/13 4:51 PM, Mike Hommey wrote:
Idempotent: Currently Gecko's parser and the URL Standard's parser are
not idempotent. E.g. http://@/mozilla.org/ becomes
http:///mozilla.org/ which when parsed becomes http://mozilla.org/
which is somewhat bad for security. My plan is to change the URL
Standard to fail parsing empty host names. I'll have to research if
there's other cases that are not idempotent.
Note that some "custom" schemes may be relying on empty host names. In
Gecko, we have about:foo as well as resource:///foo. In both cases, foo
is the path part.
I'll bet some extensions implement custom protocol handlers that do the
same thing. (In fact, I'm sure of at least one; OverbiteFF uses null
host names to denote pseudo URLs internal to the protocol handler.) This
might be considered gauche, but probably not an isolated case.
Cameron Kaiser
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform
