Open annevk opened 11 months ago
Hmm, maybe that's just the status-quo for cookies? The RFC doesn't do anything either, but with Set-Cookie
you're also limited to bytes. It doesn't seem very helpful though.
Also no handling for ..
and such anywhere. Very strange.
How does that make sense? No URL derived from non-ASCII input actually has non-ASCII in the end due to percent-encoding.