Re: [Lynx-dev] [pkg-lynx-maint] CVE-2016-9179 (invalid URL parsing with '?')

[David Woolley]

On 16/11/16 12:52, Ian Collier wrote:
> On Wed, Nov 16, 2016 at 10:05:53AM +0000, David Woolley wrote:
> > user             =  1*( unreserved / escaped / user-unreserved )
> > user-unreserved  =  "&" / "=" / "+" / "$" / "," / ";" / "?" / "/"
>
> That seems to be a quote from RFC 3261?  The relevant RFC here is 3986:

Oops.  I'm too used to looking things up in that (3621) that I went to 
it on auto-pilot.  Ignore my comment.