[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Encodings and the web
When doing research into encodings as implemented by popular user agents I
have found the current standards lacking. In particular:
* More encodings in the registry than needed for the web
* Error handling for encodings is undefined (can lead to XSS exploits,
also gives interoperability problems)
* Often encodings are implemented differently from the standard
A year ago I did some research into encodings and more detailed for
single-octet encodings and I have now taken that further into starting
to define a standard for encodings as they are to be implemented by
user agents. The current scope is roughly defining the encodings, their
labels and name, and how you match a label.
The goal is to unify encoding handling across user agents for the web so
legacy pages can be interpreted "correctly" (i.e. as expected by users).
If you are interested in helping out testing (and reverse engineering)
multi-octet encodings please let me know. Any other input is much
appreciated as well.
Anne van Kesteren