search

albinowax / browsersec

Automatically exported from code.google.com/p/browsersec
10 stars 3 forks source link

Include URL parsing differences inside <a> tags #9

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
Please include the different parsing rules that are applied in parsing URLs
inside <a> tags.
Eg, how are these parsed in different browsers:

<a href='/foo">
<a href="/foo&amp;">
<a href="/foo&quot;">
<a href='/foo&apos;'>
<a href='/foo%30'>

Original issue reported on code.google.com by lgalf...@gmail.com on 1 Jan 2009 at 11:14

GoogleCodeExporter commented 9 years ago 
With the exception of last two, these are all invalid HTML, so I doubt any 
specific
<a> tag parsing comes into effect?

Moreover, both in the invalid, uncorrected form, and in a corrected version with
matching quotes, they appear to me to parse the same way in common browsers. 
Please
clarify?

Original comment by lcam...@gmail.com on 1 Jan 2009 at 11:58

GoogleCodeExporter commented 9 years ago 
s/last two/last three/g

Original comment by lcam...@gmail.com on 2 Jan 2009 at 12:04

GoogleCodeExporter commented 9 years ago 
Please reopen with an additional clarification if appropriate.

Original comment by lcam...@gmail.com on 4 Jan 2009 at 9:48