Repository navigation
field-value value space #215
Description
I mostly know about browsers and didn't test other clients. When sending browsers effectively allow all byte values, except 0x00, 0x0A, and 0x0D.
When receiving 0x00 is also allowed, though Chrome started outlawing that recently and it seems like it might stick.
As far as I can tell field-value is quite a bit more restrictive. I wonder whether that should be reconsidered.
(I originally brought this up in #19.)
(I also haven't tested obs-fold that I remember. I don't think there's a way to force browsers to send headers like that, but receiving is a thing that probably ought to work and likely does.)
Activity
reschke commentedon Mar 28, 2019
Expanding the set of allowed characters is a non-compatible change that might break existing components.
mnot commentedon Jul 11, 2019
Yeah, I think this is out of scope for what we're trying to do here; we can't retroactively expand this and hope it'll work in all cases.
Flagging for discussion in Montreal.
annevk commentedon Jul 11, 2019
I think you'll at least have to warn servers that clients are not as restrictive as they might otherwise assume? I guess arguably that's part of generally having a robust setup, but that it's standardized to be the case for browsers might warrant an additional notice?
reschke commentedon Jul 25, 2019
Hmm. Wouldn't be the warning that some clients actually might be as restrictive as specified, so just targeting common browsers might lead to breakage with other clients?
mnot commentedon Jul 25, 2019
Discussed in montreal; close with no action.
annevk commentedon Aug 8, 2019
@reschke for responses yes, for requests, no.
zcorpan commentedon Dec 18, 2019
If I understand correctly, this was closed because you don't want to start allowing characters that were previously not allowed. But this issue is also asking for the reverse, for 0x00. Was that discussed?
reschke commentedon Dec 18, 2019
?
0x00 was not allowed at any point.
zcorpan commentedon Dec 18, 2019
Oh, OK. Sorry. I misunderstood @annevk's original comment.