Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disallow template substitution in the path of the URL template #1

Closed
wants to merge 2 commits into from

Conversation

mgiuca
Copy link
Owner

@mgiuca mgiuca commented Feb 9, 2018

This prevents a path escape if the share data includes "..". While it is a bit restrictive, we expect templates to mostly be in the query or fragment part of a URL.

Closes w3c#30.

@mgiuca mgiuca force-pushed the no-placeholders-in-path branch from f6b2dbc to 9951f1a Compare February 9, 2018 00:23
@mgiuca
Copy link
Owner Author

mgiuca commented Feb 9, 2018

I was trying to make GitHub work for a dependent code review. But you can't later land it into a different repo. Closing.

@mgiuca mgiuca closed this Feb 9, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant