https://bz.apache.org/bugzilla/show_bug.cgi?id=62273
--- Comment #10 from Mark Thomas <ma...@apache.org> --- I've been spending some time looking at whatwg.org URL spec. It appears, from https://bugzilla.mozilla.org/show_bug.cgi?id=1451347 that the browsers consider any string that passes the URL parser as valid and that the result of that parsing is passed to the server. The rules for writing URLs are different but they don;t appear to apply in this case since if they did, everything we expect to be encoded in a query string would be encoded. I've been through the path parsing defined by the whatwg.org URL spec and I believe it is the same as RFC7230 / RFC3986. I've also been over the query part of the whatwg.org URL spec and I now believe there are 8 characters we expect to be encoded that the whatwg.org URL spec does not. They are: "[", "]", "\", "^", "`", "{", "|", "}" I still need to check the authority part. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
