Skip to content
This repository has been archived by the owner on Jun 1, 2022. It is now read-only.

Enforce host in PaymentPointer #441

Open
sappenin opened this issue Mar 18, 2020 · 0 comments
Open

Enforce host in PaymentPointer #441

sappenin opened this issue Mar 18, 2020 · 0 comments
Labels
bug

Comments

@sappenin
Copy link
Contributor

The current implementation of PaymentPointer allows parses $https://dev.foo.example.com/someone to the URL https://https//dev.foo.example.com/someone which is not a valid URL.

The PaymentPointer's normalization method should enforce that the host portion of a payment pointer conforms to RFC-3986, which disallows : or / in the host.

At the same time, we should likewise ensure that the path component of a PaymentPointer conforms to section 3.3 of RFC-3986.
@sappenin sappenin added the bug label Mar 18, 2020
@sappenin sappenin modified the milestone: 1.3 Release May 11, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
bug
Milestone
No milestone
Development

No branches or pull requests
1 participant
@sappenin