Skip to content

UserinfoInTarget

[Source]

A request-target authority carries a userinfo subcomponent.

RFC 9110 §4.2.4 deprecates userinfo in http/https URIs: a client MUST NOT send it, and a recipient should treat its presence as an error, since it obscures the true authority (a phishing aid) and lets parties that split the authority on a different @ derive different hosts — a routing-confusion / request-smuggling surface. The CONNECT authority-form grammar (RFC 9112 §3.2.3, uri-host ":" port) has no userinfo at all. Stallion rejects any userinfo in the request-target authority with 400, for every request-target form, independent of the Host header.

primitive val UserinfoInTarget

Constructors

create

[Source]

new val create()
: UserinfoInTarget val^

Returns

Public Functions

string

[Source]

fun box string()
: String iso^

Returns

eq

[Source]

fun box eq(
  that: UserinfoInTarget val)
: Bool val

Parameters

Returns

ne

[Source]

fun box ne(
  that: UserinfoInTarget val)
: Bool val

Parameters

Returns