The RFC 3986, warns about these "[","]" characters, but leaves it up
to the implementor. Firefox, IE and Safari browsers support these
characters.
http://tools.ietf.org/html/rfc3986

"Special care should be taken when the URI path interpretation process
   involves the use of a back-end file system or related system
   functions.  File systems typically assign an operational meaning to
   special characters, such as the "/", "\", ":", "[", and "]"
   characters, and to special device names like ".", "..", "...",
"aux",
   "lpt", etc.  In some cases, merely testing for the existence of
such
   a name will cause the operating system to pause or invoke unrelated
   system calls, leading to significant security concerns regarding
   denial of service and unintended data transfer. "

The now, obsolete http://www.ietf.org/rfc/rfc2396.txt, had them listed
as unwise characters
" Other characters are excluded because gateways and other transport
   agents are known to sometimes modify such characters, or they are
   used as delimiters.

   unwise      = "{" | "}" | "|" | "\" | "^" | "[" | "]" | "`"

   Data corresponding to excluded characters must be escaped in order
to
   be properly represented within a URI.
"

On Apr 9, 11:50 am, Phlip <[email protected]> wrote:
> Do the RFCs and whatnot list those characters as valid in a URI query?
>
> The question comes up because - despite Rails's joyful abuse of those 
> characters
> to delimit records - some of our params are coming in not like this...
>
>    "record[first_name]" => "yo"
>
> ...but like this:
>
>    "record first_NAME " => "yo"
>
> The raw query has %20 marks for the spaces.
>
> So what's doing that? And why is the NAME in caps?? So far, the only thing the
> User Agents have in common is "Windows 5.1" and some version of "Firefox".

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to