Klarinet Archive - Posting 000221.txt from 2006/05

From: Joseph Wakeling <joseph.wakeling@-----.net>
Subj: Re: [kl] Fingering and tuning charts, again
Date: Tue, 30 May 2006 09:14:12 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

David Kumpf wrote:
> So from a parser:
>
> <any_literal><token_period><any_literal><token_period>{<literal_net> |
> <literal_com> | <literal_org> | etc...)
>
> Joseph, will it allow:
>
> <any_literal><token_period>{<literal_net> | <literal_com> |
> <literal_org> | etc...)

May I suggest you test it yourself? :-) If you don't have a gmail
address I'd be happy to send you an invite.

FWIW I suspect the answer to be yes since these days many websites like
to miss off the "www." when giving their URL. e.g. I give my website
URL as just webdrake.net.

More interesting to me is how it interprets things like,

.adelphia.net
users.adelphia.net.oops

Mark Charette wrote:
> And in another sense ... when a BNF grammar that doesn't require the
> scheme to be considered a URI is applied to all my messages I shudder
> ... it's already bad enough that a malicious entry can be made via a
> uri - leaving off the scheme and interpreting it as if it included a
> scheme is downright dangerous.

It certainly seems to open the door to abuse. On the other hand, how is
this different from someone just typing (or cutting-and-pasting) a URI,
without the scheme/transfer protocol straight into their web browser?

-- Joe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEfETOcjylL0sfzuERAvlhAJ4qjyE9/dij1+FUEY2foL25wP8xPgCfaVIl
vDLvqP16Drd0wV4BUTgEwKk=
=9TOQ
-----END PGP SIGNATURE-----

-------------------------------------------------------------------
Klarinet is a service of Woodwind.Org, Inc. http://www.woodwind.org