oss-sec mailing list archives

Re: [FD] [oss-security] CVE request:Lynx invalid URL parsing with '?'

From: Michal Zalewski <lcamtuf () coredump cx>
Date: Sat, 5 Nov 2016 00:05:35 -0700

Actually, it does parse correctly.  Go read RFC 1738.


IIRC, RFC 3986 "fixes" that, and so does https://url.spec.whatwg.org/.

/mz

Current thread:

CVE request:Lynx invalid URL parsing with '?' redrain root (Nov 03)
- Re: CVE request:Lynx invalid URL parsing with '?' Leo Famulari (Nov 03)
- Re: CVE request:Lynx invalid URL parsing with '?' cve-assign (Nov 04)
- Re: CVE request:Lynx invalid URL parsing with '?' Thomas Dickey (Nov 04)
- Message not available
  - Re: [FD] [oss-security] CVE request:Lynx invalid URL parsing with '?' Michal Zalewski (Nov 05)