[whatwg] Stripping newlines from URI attributes

Anne van Kesteren annevk at opera.com
Thu Jul 30 01:01:30 PDT 2009

On Thu, 30 Jul 2009 02:49:01 +0200, Kartikaya Gupta <lists.whatwg at stakface.com> wrote:
> It seems that most browsers do some sort of newline and tab removal from  
> URI attributes. For example, if you have
> <img src="foo
> bar.jpg">
> browsers will still render the image called "foobar.jpg" despite the  
> CRLF pair in the middle of the src attribute. The behavior actually  
> seems a bit more complex; quote from one of my co-workers who  
> investigated this:

Any chance you could also check whether this applies to CSS, XMLHttpRequest, HTTP Location, etc.? So for I've found that browsers use the same URL processor everywhere (though sometimes the URL character encoding flag is set to UTF-8 and cannot be changed). As such it would be nice to know if that is still true here or whether this is a pre-processing step specific to HTML attribute values.

Anne van Kesteren

More information about the whatwg mailing list