[html5] r7595 - [e] (0) Mention U+0000 handling in the parser. Affected topics: HTML, HTML Synta [...]

whatwg at whatwg.org whatwg at whatwg.org
Tue Dec 18 16:33:35 PST 2012


Author: ianh
Date: 2012-12-18 16:33:34 -0800 (Tue, 18 Dec 2012)
New Revision: 7595

Modified:
   complete.html
   index
   source
Log:
[e] (0) Mention U+0000 handling in the parser.
Affected topics: HTML, HTML Syntax and Parsing

Modified: complete.html
===================================================================
--- complete.html	2012-12-19 00:27:30 UTC (rev 7594)
+++ complete.html	2012-12-19 00:33:34 UTC (rev 7595)
@@ -87604,6 +87604,11 @@
   consumed. Otherwise, the "EOF" character is not a real character in
   the stream, but rather the lack of any further characters.</p>
 
+  <p class=note>The handling of U+0000 NULL characters varies based on where the characters are
+  found. In general, they are ignored except where doing so could plausibly introduce an attack
+  vector. This handling is, by necessity, spread across both the tokenization stage and the tree
+  construction stage.</p>
+
   </div>
 
 
@@ -104229,6 +104234,7 @@
   Bruce Miller,
   C. Williams,
   Cameron McCormack,
+  Cameron Zemek,
   Cao Yipeng,
   Carlos Gabriel Cardona,
   Carlos Perelló Marín,

Modified: index
===================================================================
--- index	2012-12-19 00:27:30 UTC (rev 7594)
+++ index	2012-12-19 00:33:34 UTC (rev 7595)
@@ -87604,6 +87604,11 @@
   consumed. Otherwise, the "EOF" character is not a real character in
   the stream, but rather the lack of any further characters.</p>
 
+  <p class=note>The handling of U+0000 NULL characters varies based on where the characters are
+  found. In general, they are ignored except where doing so could plausibly introduce an attack
+  vector. This handling is, by necessity, spread across both the tokenization stage and the tree
+  construction stage.</p>
+
   </div>
 
 
@@ -104229,6 +104234,7 @@
   Bruce Miller,
   C. Williams,
   Cameron McCormack,
+  Cameron Zemek,
   Cao Yipeng,
   Carlos Gabriel Cardona,
   Carlos Perelló Marín,

Modified: source
===================================================================
--- source	2012-12-19 00:27:30 UTC (rev 7594)
+++ source	2012-12-19 00:33:34 UTC (rev 7595)
@@ -101648,6 +101648,11 @@
   consumed. Otherwise, the "EOF" character is not a real character in
   the stream, but rather the lack of any further characters.</p>
 
+  <p class="note">The handling of U+0000 NULL characters varies based on where the characters are
+  found. In general, they are ignored except where doing so could plausibly introduce an attack
+  vector. This handling is, by necessity, spread across both the tokenization stage and the tree
+  construction stage.</p>
+
   </div>
 
 
@@ -122021,6 +122026,7 @@
   Bruce Miller,
   C. Williams,
   Cameron McCormack,
+  Cameron Zemek,
   Cao Yipeng,
   Carlos Gabriel Cardona,
   Carlos Perelló Marín,




More information about the Commit-Watchers mailing list