Export to GitHub

browsersec - issue #9

Include URL parsing differences inside <a> tags


Posted on Jan 1, 2009 by Happy Ox

Please include the different parsing rules that are applied in parsing URLs inside <a> tags. Eg, how are these parsed in different browsers:

<a href='/foo"> <a href="/foo&amp;"> <a href="/foo&quot;"> <a href='/foo&apos;'> <a href='/foo%30'>

Comment #1

Posted on Jan 1, 2009 by Massive Wombat

With the exception of last two, these are all invalid HTML, so I doubt any specific tag parsing comes into effect?

Moreover, both in the invalid, uncorrected form, and in a corrected version with matching quotes, they appear to me to parse the same way in common browsers. Please clarify?

Comment #2

Posted on Jan 2, 2009 by Massive Wombat

s/last two/last three/g

Comment #3

Posted on Jan 4, 2009 by Massive Wombat

Please reopen with an additional clarification if appropriate.

Status: WontFix

Labels:
Type-Enhancement Priority-Medium