[TYPO3-core] RFC #14342: t3lib_compressor also rewrites data URIs

JoH asenau info at cybercraft.de
Thu May 20 16:56:22 CEST 2010


>>>> Problem:
>>>> According to RFC 2616 [1] images/files can be embedded using the
>>>> data: URI
>>>> scheme.
>>>> In CSS this can be used this way:
>>>>> background-image:
>>>>> url("data:image/gif;base64,SOMETHING_BASE64_ENCODED")
>>>> t3lib_compressor also rewrites this URIs and considers them as a
>>>> filename while merging CSS.
>>>
>>> REMINDER
>>
>> -1 due to the reasons explained in RFC #14442
> well since this funcitonality is not only used by core, it HAS to be
> fixed since data urls are part of CSS which must be handled correctly.
> If an extension author tends to use it it is his own opportunity.
> You may intervene usage in core, but core has to handle it correctly
> in theory!

OK guys, you are right - so I will change this to a +1 if we can be sure
that this kind of URL which can be used to get data from i.e. a htaccess
protected page, will be treated correctly as well:
username:password at whatever.domain.tld/some/path/to/my/file.jpg
which could be
data:1234 at whatever.domain.tld/some/path/to/my/file.jpg

To make sure it will, it might be necessary to check for the existance of
"data:" and the absence of "@", since @ can't be used for the data URL at
all and thus should be unique for a case like the above.

Cheers

Joey

-- 
Wenn man keine Ahnung hat: Einfach mal Fresse halten!
(If you have no clues: simply shut your gob sometimes!)
Dieter Nuhr, German comedian
Xing: http://contact.cybercraft.de
Twitter: http://twitter.com/bunnyfield
TYPO3 cookbook (2nd edition): http://www.typo3experts.com




More information about the TYPO3-team-core mailing list