Status: Accepted
Owner: ----
CC: jasvir
Labels: Type-Defect Priority-Medium

New issue 992 by mikesamuel: Rewrite Escaping.normalizeUri
http://code.google.com/p/google-caja/issues/detail?id=992

Escaping.normalizeUri does not take into account different escaping
conventions for different URI parts, so will not reliably escape ':'s in
paths, and cannot normalize '+' since it has a different meaning in
different parts.

It should be rewritten to take a URI as argument, and to take advantage of
URI structure to do a stricter normalization, and to rewrite '+' to %20 or
%2B as appropriate.

It should also be used in rewriting HTML, not just in CSS rendering.

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

Reply via email to