web-access-control-spec
web-access-control-spec copied to clipboard
Clarify whether ACL needs normalization
On proposal
WAC
Details
If a server receives a request for /&foo, it might become normalized into /%26foo.
Should the ACL document refer to /&foo, /%26foo, or either of those?
Are /&foo and /%26foo the same or different resources a) for ACL purposes b) for other purposes?
Acceptance criteria
What actions are needed to resolve this issue? (checklist)
- [ ] A concrete statement on how to treat normalized URLs