Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Block redirects to non-HTTP schemes #309

Closed
annevk opened this issue May 30, 2016 · 1 comment
Closed

Block redirects to non-HTTP schemes #309

annevk opened this issue May 30, 2016 · 1 comment

Comments

@annevk
Copy link
Member

annevk commented May 30, 2016

Note that HTML's navigate is probably a special case still with its manual redirect logic (see whatwg/html#461) although Firefox appears quite strict there as well (not supporting mailto or facetime URLs, which appear to work in other browsers).

(One difference I've found is that Firefox supports data URLs in Location headers when navigating, but not otherwise. That is also the case for Safari. Chrome never supports data URLs.)

@annevk
Copy link
Member Author

annevk commented May 30, 2016

I think I'll fix this with the caveat that we might need to rearchitect a bit more based on further navigate findings.

annevk added a commit to web-platform-tests/wpt that referenced this issue May 30, 2016
@annevk annevk closed this as completed in 9b75908 May 30, 2016
annevk added a commit to web-platform-tests/wpt that referenced this issue May 30, 2016
arronei pushed a commit to arronei/web-platform-tests that referenced this issue Jun 14, 2016
ivanzr pushed a commit to ivanzr/web-platform-tests that referenced this issue Jun 29, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

1 participant