Project

General

Profile

Feature #4551

Updated by naruse (Yui NARUSE) about 12 years ago

=begin 
 
 From RFC 2396 section 3.1: 

 "For resiliency, programs interpreting URI should treat upper case letters as equivalent to lower case in scheme names (e.g., allow 'HTTP' as well as 'http')." 

 Currently programs using URI for HTTP vs HTTPS protocol check which protocol to use with a comparison like: 

  http.use_ssl = uri.scheme == 'https' 

 Since URI does not modify the input scheme this makes the check fragile.    For example: 

  URI.parse('httpS://example').scheme # => "httpS" 

 Since RFC 2396 allows uppercase letters to be treated like lowercase I think #set_scheme should downcase its value. 
 
 =end

Back