When URL parsers disagree (CVE-2023-38633, librsvg)

• wirefilter

  1 932 0.0 Rust

  An execution engine for Wireshark-like filters

  

Out of interest, was this the project that eventually became wirefilter [1]?

[1]: https://github.com/cloudflare/wirefilter

• firewalker

  1 49 6.2 TypeScript

  Testing framework for Cloudflare Firewall rules

Thank you for releasing it! I adopted wirefilter for a firewall rule testing project, firewalker [1]. But indeed, I wish Cloudflare kept maintaining its OSS version.

[1]: https://github.com/SerCeMan/firewalker/

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• CPython

  1,314 59,658 10.0 Python

  The Python programming language

  

Speaking of URL parsing differences, Python's urllib library recently had a CVE for failing to strip whitespace from the scheme and domain.

https://github.com/python/cpython/issues/102153

• url

  14 505 5.9 HTML

  URL Standard

  

Browsers have discrepancies too of course. Here's an interesting Chromium bug I've been following: https://bugs.chromium.org/p/chromium/issues/detail?id=125253... and an associated WHATWG discussion: https://github.com/whatwg/url/issues/606

Some multiple examples of browsers disagreeing: https://www.yagiz.co/url-parsing-and-browser-differences

Suggest a related project