3 ms·
Can email interfere with HTTP headers though? There's no \r\n, ";" or "=" in valid email. Anyway, I have seen sites where it was used as a security measure. Or
by rplnt 14y ago
Can email interfere with HTTP headers though? There's no \r\n, ";" or "=" in valid email.
Anyway, I have seen sites where it was used as a security measure. Or so the authors thought I guess. Storing login password in url parameter? Seems safe if it is encoded.. But it was years ago.
- hoov 14y agoActually, the '=' character is allowed. [1] [1] http://tools.ietf.org/html/rfc5322#section-3.2.3 http://tools.ietf.org/html/rfc5322#section-3.2.3
- ddunkin 14y agoIt sounds like you confused encoded with encrypted, encoded is no different than plain-text. The encoding is just to get a valid string for the URI (so a password can contain special URI characters) and is instantly reversible.
- rplnt 14y agoNo, I haven't. Should have put the "security measure" in the quotes.
- papsosouid 14y ago>There's no \r\n, ";" or "=" in valid email. Both ; and = are perfectly valid.
- rplnt 14y agoDid not know that, thanks for pointing that out. In that case the encoding is necessary. On top of that I just found out that even Unicode characters are permitted (RFC 6531).