On Mon, Aug 2, 2010 at 6:15 PM, David Stanek <dsta...@dstanek.com> wrote:
> I just verified that the Python urllib client does send the fragment to the > server. I've created a patch and will be created a bug on the Python > tracker. > Cool, but this doesn't seem relevant to the user-agent profile. Market penetration of browsers written in python is limited. > Does anyone know what RFC actually talks about not sending the fragment? > I've seen 3986 where it explains that a fragment isn't really a part of the > URI, but it's doesn't specifically say that the client should not send it to > the server. > No idea. This might be one of those things that all the browsers implement, but has never been fully specified. There are a few notes on referers in the browsersec wiki: http://code.google.com/p/browsersec/wiki/Part1 Cheers, Brian
_______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth
