<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>34011</bug_id>
          
          <creation_ts>2010-01-22 11:34:07 -0800</creation_ts>
          <short_desc>invalidated KURLs can be used accidentally</short_desc>
          <delta_ts>2010-02-02 11:24:11 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebCore Misc.</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>INVALID</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P3</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Bryan Yeung">bryeung</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>ap</cc>
    
    <cc>brettw</cc>
    
    <cc>bryeung</cc>
    
    <cc>commit-queue</cc>
    
    <cc>darin</cc>
    
    <cc>eric</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>183721</commentid>
    <comment_count>0</comment_count>
    <who name="Bryan Yeung">bryeung</who>
    <bug_when>2010-01-22 11:34:07 -0800</bug_when>
    <thetext>If a KURL has a null base, it is marked as invalidated but the relative portion is set as the URL.  These invalidated URLs can then be used accidentally, as they do contain some data.  It seems that using KURLs with unvalidated relative paths could cause problems, so I think it would be safer (and more correct) to make the URL empty when a KURL is invalidated.

I&apos;m going to do a bunch of testing to ensure this doesn&apos;t break anything, but in the meantime wanted a bug to track opinions on this.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>183738</commentid>
    <comment_count>1</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2010-01-22 12:06:12 -0800</bug_when>
    <thetext>This bug came up because this behavior differs from GKURL and revealed a bug in SVGImageLoader.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>183775</commentid>
    <comment_count>2</comment_count>
    <who name="Darin Adler">darin</who>
    <bug_when>2010-01-22 13:36:29 -0800</bug_when>
    <thetext>Lets look at the specific symptoms and consider the best way to fix them.

There may well be places where we want to carry around arbitrary strings even if KURL thinks they are invalid URLs -- it would be risky to make this change to such an often-used class.

The fact that Google’s separate version of KURL did not preserve this feature is interesting, but we haven’t tested the vast number of WebKit clients on Mac OS X, for example, with Google’s implementation. So we don’t know what the repercussions of starting to completely disallow invalid URLs would be.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>187048</commentid>
    <comment_count>3</comment_count>
    <who name="Bryan Yeung">bryeung</who>
    <bug_when>2010-02-02 10:49:09 -0800</bug_when>
    <thetext>Fixing symptoms sounds reasonable.  I understand that with such a core piece of infrastructure, such a fundamental change is extremely difficult to make.

Here is a bug about a specific symptom I would like to fix:
https://bugs.webkit.org/show_bug.cgi?id=34492

Should this bug remain open to track any further symptoms that arise, or should it be closed and individual bugs filed for each symptom?

Thanks.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>187054</commentid>
    <comment_count>4</comment_count>
    <who name="Darin Adler">darin</who>
    <bug_when>2010-02-02 10:58:30 -0800</bug_when>
    <thetext>Generally we file bugs about actual problems rather than design issues. I added comments to that other bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>187070</commentid>
    <comment_count>5</comment_count>
    <who name="Bryan Yeung">bryeung</who>
    <bug_when>2010-02-02 11:24:11 -0800</bug_when>
    <thetext>Individual issues related to the different in KURL and KURLGoogle can be tracked in their own bugs.  Closing this one.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>