On Thu, 30 Jul 2009 02:49:01 +0200, Kartikaya Gupta <lists.wha...@stakface.com> wrote: > It seems that most browsers do some sort of newline and tab removal from > URI attributes. For example, if you have > > <img src="foo > bar.jpg"> > > browsers will still render the image called "foobar.jpg" despite the > CRLF pair in the middle of the src attribute. The behavior actually > seems a bit more complex; quote from one of my co-workers who > investigated this:
Any chance you could also check whether this applies to CSS, XMLHttpRequest, HTTP Location, etc.? So for I've found that browsers use the same URL processor everywhere (though sometimes the URL character encoding flag is set to UTF-8 and cannot be changed). As such it would be nice to know if that is still true here or whether this is a pre-processing step specific to HTML attribute values. -- Anne van Kesteren http://annevankesteren.nl/
