Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 0de4332c951191998d698fdffa122d988e0daf3f
https://github.com/WebKit/WebKit/commit/0de4332c951191998d698fdffa122d988e0daf3f
Author: Alex Christensen <[email protected]>
Date: 2026-06-22 (Mon, 22 Jun 2026)
Changed paths:
M Source/WTF/wtf/URLHelpers.cpp
M Tools/TestWebKitAPI/Tests/WTF/cocoa/URLExtras.mm
Log Message:
-----------
WebKit encodes path separator as %2F after percent-encoded Armenian path
segment
https://bugs.webkit.org/show_bug.cgi?id=317364
rdar://180067095
Reviewed by Anne van Kesteren.
In 236210@main I made it so that Armenian characters that look like Latin
characters
are percent encoded or punycode encoded unless they are surrounded by other
Armenian
characters or immediately after a slash. I should've allowed them to go
un-encoded
if they are immediately before a slash, too. The example from Tom the reporter
had
U+057D after another
Armenian character and before a slash in the path of a URL.
This is not trying to make U+057D look like the Latin U character out of
context,
this is in a reasonable Armenian context.
I did the same with all URL separators: #, /, ?, and :.
Test: Tools/TestWebKitAPI/Tests/WTF/cocoa/URLExtras.mm
* Source/WTF/wtf/URLHelpers.cpp:
(WTF::URLHelpers::isLookalikeSequence):
* Tools/TestWebKitAPI/Tests/WTF/cocoa/URLExtras.mm:
(TestWebKitAPI::TEST(URLExtras, URLExtras_NotSpoofed)):
Canonical link:
https://flagged.apple.com:443/proxy?t2=dZ8D9T1EC3&o=aHR0cHM6Ly9jb21taXRzLndlYmtpdC5vcmcvMzE1NjI3QG1haW4=&emid=b5251cc6-b230-4887-b84f-46d08f482bde&c=11
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
