Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Define origin and authority for http and https URIs#266

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Merged
royfielding merged 34 commits intomasterfromfielding-02
Feb 12, 2020
Merged
Show file tree
Hide file tree
Changes from1 commit
Commits
Show all changes
34 commits
Select commitHold shift + click to select a range
d941116
first pass at describing https authority for #194 and #237
royfieldingNov 20, 2019
dd554de
update generated files
royfieldingNov 20, 2019
f3098b7
improve layout of origin example and fix plain text references
royfieldingNov 20, 2019
1af630c
fix odd position of colon separator in scheme definitions
royfieldingNov 20, 2019
1422c34
it reads better if normalization is defined before using it
royfieldingNov 20, 2019
87e1717
Merge remote-tracking branch 'origin' into fielding-02
royfieldingNov 20, 2019
cfec4ae
Merge branch 'master' into fielding-02
reschkeJan 6, 2020
df10079
use <artwork> instead of <sourcecode> for examples
reschkeJan 6, 2020
9dcfc89
Merge branch 'master' into fielding-02
royfieldingFeb 2, 2020
152d52c
define what we mean by secured so that it can be used several times, …
royfieldingFeb 3, 2020
d1a94e2
Merge branch 'master' into fielding-02
royfieldingFeb 3, 2020
7ee4388
tweak wording
royfieldingFeb 3, 2020
3581489
avoid defining authority as a general term
royfieldingFeb 3, 2020
7b92a50
move informational ref to Web Origin Concept up to section on origin
royfieldingFeb 3, 2020
97bcc64
clarify chain of trust (Martin)
royfieldingFeb 3, 2020
edb9c38
more tweaks to define https services accessed via other protocols
royfieldingFeb 3, 2020
102d96e
use effective request URI instead of referring specifically to Host
royfieldingFeb 3, 2020
22d507e
missing space in example
royfieldingFeb 3, 2020
9b7e91b
more tweaks from Mike Bishop
royfieldingFeb 3, 2020
9a867b0
clarify bits about when origins match
royfieldingFeb 3, 2020
2e23004
Merge branch 'master' into fielding-02
royfieldingFeb 4, 2020
917af25
further define the https name matching for TLS (Martin)
royfieldingFeb 4, 2020
088962a
Clarify language regarding CC: private
mnotFeb 4, 2020
ce19869
julian's suggestion
mnotFeb 4, 2020
5fe506b
change log
reschkeFeb 4, 2020
15f7e5a
add subsections for scheme origins
royfieldingFeb 4, 2020
01a8c6d
Merge branch 'master' into fielding-02
royfieldingFeb 4, 2020
02fe369
Merge branch 'master' into fielding-02
royfieldingFeb 5, 2020
cb1c45d
Merge branch 'master' into fielding-02
royfieldingFeb 6, 2020
3a85c01
a private key, not the private key
royfieldingFeb 6, 2020
0c345ad
Move origin and authoritative access to Routing
royfieldingFeb 6, 2020
b167ca1
are not is
royfieldingFeb 6, 2020
d835599
Merge branch 'master' into fielding-02
royfieldingFeb 12, 2020
97c8f64
add change notes to fix #237
royfieldingFeb 12, 2020
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
PrevPrevious commit
NextNext commit
use effective request URI instead of referring specifically to Host
  • Loading branch information
@royfielding
royfielding committedFeb 3, 2020
commit102d96e5881f21d32592d39c1f26f53e9864395b
4 changes: 2 additions & 2 deletionsdraft-ietf-httpbis-semantics-latest.html
View file
Open in desktop

Some generated files are not rendered by default. Learn more abouthow customized files appear on GitHub.

2 changes: 1 addition & 1 deletiondraft-ietf-httpbis-semantics-latest.xml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -976,7 +976,7 @@ Content-Type: text/plain
for verifying that requests it receives over a connection correspond
to resources for which it actually wants to be the origin. If a network
attacker causes connections for port N to be received at port Q, checking
theHost header field is necessary to ensure that the attacker can't cause
theeffective request URI is necessary to ensure that the attacker can't cause
"https://example.com:N/foo" to be replaced by "https://example.com:Q/foo"
without consent. Likewise, a server might be unwilling to serve as the
origin for some hosts even when they have the authority to do so.
Expand Down

[8]ページ先頭

©2009-2025 Movatter.jp