My favorites | Sign in
Project Home Downloads Wiki Issues Code Search
New issue   Search
for
  Advanced search   Search tips   Subscriptions
Issue 49909: GURL hostname seems to validate when whitespace is included
3 people starred this issue and may be notified of changes. Back to list
Status:  IceBox
Owner:  ----
Closed:  Aug 2012

Restricted
  • Only users with Commit permission may comment.


Sign in to add a comment
 
Reported by peter%lvp-media.com@gtempaccount.com, Jul 22, 2010
Chrome Version       : 6.0.466.0
URLs (if applicable) : http://tc.labs.opera.com/apis/EventSource/003.htm
Other browsers tested:
     Safari 4: OK

What steps will reproduce the problem?
1. Run the testcase.

What is the expected result?

PASS, as can be seen in Safari (which uses KURL rather than GURL).

What happens instead?

The test failed. Chrome should be throwing a SYNTAX_ERR (spaces in hostnames aren't allowed) as the URL is invalid, however, doesn't.

WebKit handling of the EventSource can be found in:
  WebCore/platform/EventSource.cpp (line 73-88)

Steps in WebKit are:
  1. Check if the URL is empty (if so: throw SYNTAX_ERR)
  2. Check if the URL is valid (if not: throw SYNTAX_ERR)
  3. Check if the URL can be requested from the security origin (if not: throw SECURITY_ERR).
  4. Create and connect to the EventSource.

GURL seems to bug at step 2. The test-case throws a SECURITY_ERR which indicates that the isValid() call on line 79 does not return false. Reporting the issue here as URL parsing gets done by GURL in Chrome.
Aug 10, 2012
#2 bugdroid1@chromium.org
Closing old bug as obsolete. Please file a new bug (with details) if this problem is still occurring for you.
Status: IceBox
Oct 13, 2012
#3 bugdroid1@chromium.org
This issue has been closed for some time. No one will pay attention to new comments.
If you are seeing this bug or have new data, please click New Issue to start a new bug.
Labels: Restrict-AddIssueComment-Commit
Mar 10, 2013
#4 bugdroid1@chromium.org
(No comment was entered for this change.)
Labels: -Area-Undefined
Sign in to add a comment

Powered by Google Project Hosting