Clarify what URL schemes are allowed in Bundled Exchanges
Open
Nobody has claimed this yet.
bundled-exchanges
- Dominant language
- Go
- Stars
- 1.3k
- Forks
- 125
- PR merge metrics
- No merged PRs in 30d
Description
Current bundle spec says that Bundled Exchanges parser must fail if URL have a fragment or credentials, but says nothing about the URL scheme.
In Signed Exchange, exchange's URL must be https:. Sould Bundled Exchanges follow this, or should also allow http:? Since exchange is defined as HTTP request+response pair, I think non-http(s) schemes don't make sense.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Read the Bundled Exchanges parser requirement and the linked Signed Exchange URL requirement to compare their treatment of URL schemes. Resolve whether Bundled Exchanges should permit only https: or also http:, then update the specification so the allowed schemes are stated explicitly.
Written by the indexing model from the issue text.
Assessment
- Domain
- documentation
- Issue type
- Documentation
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100