Bence Béky

Results 23 comments of Bence Béky

My gut feeling is that (1) if no other browsers support null bytes, then it is probably safe for Firefox to reject them too, and (2) it might be less...

I understand. Indeed stripping characters seems fragile. What is the plan with the Fetch spec? Is it going to be changed to allow null characters in header values? Or changed...

It seems inconsistent to allow null characters in responses and not in requests. Why not stick to the current specification and disallow them in both? In any case, I agree...

Okay, so it seems like it makes sense to disallow null bytes in request headers. For consistency, it would make sense to do the same in response headers, both XHR...

Yes, I'll take care of Chrome. Thank you for driving this!

Didn't find bug against Chromium, so just filed https://crbug.com/832086.

PTAL. It would be difficult to change the internals of Balsa to be permissive in this case. Do you think this is okay?

Dianna, Biren, PTAL. /assign @diannahu @birenroy