News for hackers. Stuff that matters.

A comment on OpenBSD system-call-origin verification. Parent comment

Re:OpenBSD system-call-origin verification by pas on Sunday December 22, 2019 @08:05PM (#21860782)
The internal syntax and semantics of the query part is not really defined by HTTP. (https://tools.ietf.org/html/rfc3986#section-3.4)

Also:

"Historic RFC 1866 (obsoleted by RFC 2854) encourages CGI authors to support ';' in addition to '&'"

https://en.wikipedia.org/wiki/URL#cite_note-23

[ Parent | on HN ]

There are no comments on this comment yet.