News for hackers. Stuff that matters.

A comment on Linux Kernel Exploitation: CVE-2025-21756. Parent comment

Re:Linux Kernel Exploitation: CVE-2025-21756 by aaronmdjones on Wednesday April 30, 2025 @07:06PM (#43851703)
The server is responding with

    Content-Type: text/html
i.e. no charset field.

The document itself also lacks a declared character set.

[ Parent | on HN ]
Re:Linux Kernel Exploitation: CVE-2025-21756 by drougge on Thursday May 01, 2025 @04:36AM (#43855050)
One thing that really annoys me about the HTTP standards is that some older version used to say that text/* without a declared charset was definitely latin-1 (don't remember which version exactly). Then a later version said no, text/* without a declared charset is definitely utf-8. In practice I feel this means they said "not declaring a charset is definitely not ok", but in a way that no one will understand.

Possibly a newer version that I haven't read fixed how they said that. As long as I don't check I can hope.

[ Parent | on HN ]