diff --git a/url.bs b/url.bs index 24b45782..9cca3796 100644 --- a/url.bs +++ b/url.bs @@ -613,7 +613,7 @@ concepts.
The domain to ASCII algorithm, given a string -domain and an optional boolean beStrict (default false), runs these steps: +domain and a boolean beStrict, runs these steps:
The domain to Unicode algorithm, given a domain -domain, runs these steps: +domain and a boolean beStrict, runs these steps:
Let result be the result of running Unicode ToUnicode with domain_name set to domain, CheckHyphens set to false, CheckBidi set to true, CheckJoiners set to true, - UseSTD3ASCIIRules set to false, and Transitional_Processing set to false. + UseSTD3ASCIIRules set to beStrict, and Transitional_Processing set to + false.
Signify validation errors for any returned errors, and then, return result. @@ -663,10 +664,8 @@ concepts.
If result is failure, then return failure. -
Set result to the result of running - Unicode ToUnicode with domain_name set to result, - CheckHyphens set to false, CheckBidi set to true, CheckJoiners set to true, - UseSTD3ASCIIRules set to true, and Transitional_Processing set to false. +
Set result to the result of running domain to Unicode with + result and true.
If result contains any errors, return failure. @@ -732,8 +731,8 @@ runs these steps:
Alternatively UTF-8 decode without BOM or fail can be used, coupled with an early return for failure, as domain to ASCII fails on U+FFFD (�). -
Let asciiDomain be the result of running - domain to ASCII on domain. +
Let asciiDomain be the result of running domain to ASCII with + domain and false.
If asciiDomain is failure, validation error, return failure. @@ -2822,7 +2821,8 @@ handled with care to prevent spoofing:
Browsers should render a URL's host using domain to Unicode. +
Browsers should render a URL's host by running + domain to Unicode with the URL's host and false.
Various characters can be used in homograph spoofing attacks. Consider detecting confusable characters and warning when they are in use. [[IDNFAQ]] [[UTS39]]