Full Disclosure mailing list archives
Re: [oss-security] CVE request:Lynx invalid URL parsing with '?'
From: Michal Zalewski <lcamtuf () coredump cx>
Date: Sat, 5 Nov 2016 00:05:35 -0700
Actually, it does parse correctly. Go read RFC 1738.
IIRC, RFC 3986 "fixes" that, and so does https://url.spec.whatwg.org/. /mz _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Current thread:
- [oss-security] CVE request:Lynx invalid URL parsing with '?' redrain root (Nov 04)
- Re: [oss-security] CVE request:Lynx invalid URL parsing with '?' Thomas Dickey (Nov 04)
- Re: [oss-security] CVE request:Lynx invalid URL parsing with '?' Leo Famulari (Nov 04)
- Re: [oss-security] CVE request:Lynx invalid URL parsing with '?' Thomas Dickey (Nov 04)
- Re: [oss-security] CVE request:Lynx invalid URL parsing with '?' Michal Zalewski (Nov 05)