search

ietf-wg-emailcore / emailcore

3 stars 0 forks source link

Erratum 3135: quoted-string definition allows for semantically invalid empty strings #35

Closed ietf-svn-bot closed 2 years ago

ietf-svn-bot commented 3 years ago

owner:alexey.melnikov@isode.com type_defect | by alexey.melnikov@isode.com

Section 3.2.4 says:

OLD: quoted-string = [CFWS] DQUOTE ([FWS] qcontent) [FWS] DQUOTE [CFWS] NEW: quoted-string = [CFWS] DQUOTE ((1([FWS] qcontent) [FWS]) / FWS) DQUOTE [CFWS]

Notes from Ashley Willis:

The text following this definition states that a "quoted-string is identical to atom, semantically." "Semantically, neither the optional CFWS outside of the quote characters nor the quote characters themselves are part of the quoted-string; the quoted-string is what is contained between the two quote characters."

The published definition allows, for example, an angle-addr of ""@ietf.org which is equivalent to <@ietf.org>, hence invalid. The corrected definition ensures that at a minimum there is one FWS or qcontent between each DQUOTE.

Currently allowed yet invalid: ""@ietf.org, foo.""@ietf.org, "".bar@ietf.org, and foo."".bar@ietf.org.

As a quoted-string must be bound by the ends of the local-part or by a dot, there is no change in regard to the currently invalid addresses such as foo""@ietf.org, ""bar@ietf.org, and foo""bar@ietf.org.

From https://www.rfc-editor.org/errata_search.php?eid=3135

Issue migrated from trac:35 at 2022-01-31 12:36:29 +0000

ietf-svn-bot commented 3 years ago

@alexey.melnikov@isode.com commented

Agreement to leave rfc5322bis as is, but add some text to A/S.

ietf-svn-bot commented 3 years ago

@alexey.melnikov@isode.com changed owner from resnick@episteme.net to alexey.melnikov@isode.com

ietf-svn-bot commented 3 years ago

@alexey.melnikov@isode.com changed component from email-format to email-applicability-statement