-
Notifications
You must be signed in to change notification settings - Fork 475
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Inconsistencies with dot-segment normalization #264
Comments
While Remove Dot Segments does not mention percent encoded values at all, it looks like you're right in the
this is definitely a bug. Are you up to the task and want to send a PR? There are a bunch of tests for From today's perspective I'd likely rewrite |
It's not clear to me from the RFC what order syntax normalizations should be applied in, but it looks like most browsers apply Percent Encoding Normalization before removing dot segments: > new URL("http://example.com/foo/%2E%2E/bar").pathname
"/bar"
Sure thing, might take me 'til the weekend though |
no worries, take your time :) |
It seems like "%2E%2E" should be treated the same as ".." during dot segment normalization, but it isn't:
Looks like it's because the normalization of %2E -> . happens after the paths are resolved.
Another one:
The text was updated successfully, but these errors were encountered: