[html5] r7595 - [e] (0) Mention U+0000 handling in the parser. Affected topics: HTML, HTML Synta [...]
whatwg at whatwg.org
whatwg at whatwg.org
Tue Dec 18 16:33:35 PST 2012
Author: ianh
Date: 2012-12-18 16:33:34 -0800 (Tue, 18 Dec 2012)
New Revision: 7595
Modified:
complete.html
index
source
Log:
[e] (0) Mention U+0000 handling in the parser.
Affected topics: HTML, HTML Syntax and Parsing
Modified: complete.html
===================================================================
--- complete.html 2012-12-19 00:27:30 UTC (rev 7594)
+++ complete.html 2012-12-19 00:33:34 UTC (rev 7595)
@@ -87604,6 +87604,11 @@
consumed. Otherwise, the "EOF" character is not a real character in
the stream, but rather the lack of any further characters.</p>
+ <p class=note>The handling of U+0000 NULL characters varies based on where the characters are
+ found. In general, they are ignored except where doing so could plausibly introduce an attack
+ vector. This handling is, by necessity, spread across both the tokenization stage and the tree
+ construction stage.</p>
+
</div>
@@ -104229,6 +104234,7 @@
Bruce Miller,
C. Williams,
Cameron McCormack,
+ Cameron Zemek,
Cao Yipeng,
Carlos Gabriel Cardona,
Carlos Perelló Marín,
Modified: index
===================================================================
--- index 2012-12-19 00:27:30 UTC (rev 7594)
+++ index 2012-12-19 00:33:34 UTC (rev 7595)
@@ -87604,6 +87604,11 @@
consumed. Otherwise, the "EOF" character is not a real character in
the stream, but rather the lack of any further characters.</p>
+ <p class=note>The handling of U+0000 NULL characters varies based on where the characters are
+ found. In general, they are ignored except where doing so could plausibly introduce an attack
+ vector. This handling is, by necessity, spread across both the tokenization stage and the tree
+ construction stage.</p>
+
</div>
@@ -104229,6 +104234,7 @@
Bruce Miller,
C. Williams,
Cameron McCormack,
+ Cameron Zemek,
Cao Yipeng,
Carlos Gabriel Cardona,
Carlos Perelló Marín,
Modified: source
===================================================================
--- source 2012-12-19 00:27:30 UTC (rev 7594)
+++ source 2012-12-19 00:33:34 UTC (rev 7595)
@@ -101648,6 +101648,11 @@
consumed. Otherwise, the "EOF" character is not a real character in
the stream, but rather the lack of any further characters.</p>
+ <p class="note">The handling of U+0000 NULL characters varies based on where the characters are
+ found. In general, they are ignored except where doing so could plausibly introduce an attack
+ vector. This handling is, by necessity, spread across both the tokenization stage and the tree
+ construction stage.</p>
+
</div>
@@ -122021,6 +122026,7 @@
Bruce Miller,
C. Williams,
Cameron McCormack,
+ Cameron Zemek,
Cao Yipeng,
Carlos Gabriel Cardona,
Carlos Perelló Marín,
More information about the Commit-Watchers
mailing list