IETF Logo Mail Archive

Re: [Jsonpath] I-D Action: draft-bormann-jsonpath-iregexp-04.txt

Carsten Bormann <cabo@tzi.org> Mon, 25 April 2022 17:00 UTC

Return-Path: <cabo@tzi.org>
X-Original-To: jsonpath@ietfa.amsl.com
Delivered-To: jsonpath@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3962BC20D660 for <jsonpath@ietfa.amsl.com>; Mon, 25 Apr 2022 10:00:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.001
X-Spam-Level:
X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FU5jVX-QoPec for <jsonpath@ietfa.amsl.com>; Mon, 25 Apr 2022 10:00:27 -0700 (PDT)
Received: from gabriel-smtp.zfn.uni-bremen.de (gabriel-smtp.zfn.uni-bremen.de [134.102.50.15]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 489E1C185156 for <jsonpath@ietf.org>; Mon, 25 Apr 2022 10:00:27 -0700 (PDT)
Received: from [192.168.217.118] (p5089ad4f.dip0.t-ipconnect.de [80.137.173.79]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-smtp.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4KnB8m1XmJzDCc9; Mon, 25 Apr 2022 19:00:24 +0200 (CEST)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.7\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <CANH0GbJm7CYUDYhvpz+F1e+NhO5pPBOxFr9T3sjEgu6pShS4Yg@mail.gmail.com>
Date: Mon, 25 Apr 2022 19:00:23 +0200
Cc: jsonpath@ietf.org
X-Mao-Original-Outgoing-Id: 672598823.7059979-6fa83ee4b761f6695c8669c30ae37ee7
Content-Transfer-Encoding: quoted-printable
Message-Id: <2D529EE4-986B-43EB-9546-0AC8418B19C9@tzi.org>
References: <165090408999.1001.9669029059632409746@ietfa.amsl.com> <8DF9CF13-3ADA-433A-97DF-6D77A222D607@tzi.org> <CANH0GbJm7CYUDYhvpz+F1e+NhO5pPBOxFr9T3sjEgu6pShS4Yg@mail.gmail.com>
To: Glyn Normington <glyn.normington.work@gmail.com>
X-Mailer: Apple Mail (2.3608.120.23.2.7)
Archived-At: <https://mailarchive.ietf.org/arch/msg/jsonpath/KtjnIUy0ETUooF4R3Igsq_Tg3B8>
Subject: Re: [Jsonpath] I-D Action: draft-bormann-jsonpath-iregexp-04.txt
X-BeenThere: jsonpath@ietf.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: A summary description of the list to be included in the table on this page <jsonpath.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jsonpath>, <mailto:jsonpath-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/jsonpath/>
List-Post: <mailto:jsonpath@ietf.org>
List-Help: <mailto:jsonpath-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jsonpath>, <mailto:jsonpath-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Apr 2022 17:00:29 -0000

> Excellent work gentlemen!

Thank you!

> I have one question about I-Regexp. Must implementations raise errors for regular expressions which do not conform to the I-Regexp syntax? That wasn't clear to me from the spec.

Interesting question.

We are not asking that for JSONPath itself, do we?

For many implementations, checking the syntax will be much more work than simply handing over to a regexp library after a few small changes.

On the other hand, being firm on interoperability is good (https://datatracker.ietf.org/doc/draft-iab-protocol-maintenance/) and the claimed attack resistance doesn’t accrue when unchecked input is handed over to an unprotected library.

Grüße, Carsten

> 
> Regards,
> Glyn
> 
> On Mon, 25 Apr 2022 at 17:42, Carsten Bormann <cabo@tzi.org> wrote:
> Tim helped turn this draft from a budding textbook about how to do regexps in standards to a crisp, implementable specification.  Please behold the result below.
> 
> Let’s see if we can finish the WG adoption call tomorrow so we have a whole set when we move jsonpath forward.
> 
> Grüße, Carsten
> 
> 
> > A New Internet-Draft is available from the on-line Internet-Drafts directories.
> > 
> > 
> >        Title           : I-Regexp: An Interoperable Regexp Format
> >        Authors         : Carsten Bormann
> >                          Tim Bray
> >       Filename        : draft-bormann-jsonpath-iregexp-04.txt
> >       Pages           : 10
> >       Date            : 2022-04-25
> > 
> > Abstract:
> >   This document specifies I-Regexp, a flavor of regular expressions
> >   that is limited in scope with the goal of interoperation across many
> >   different regular-expression libraries.
> > 
> > 
> > The IETF datatracker status page for this draft is:
> > https://datatracker.ietf.org/doc/draft-bormann-jsonpath-iregexp/
> > 
> > There is also an HTML version available at:
> > https://www.ietf.org/archive/id/draft-bormann-jsonpath-iregexp-04.html
> > 
> > A diff from the previous version is available at:
> > https://www.ietf.org/rfcdiff?url2=draft-bormann-jsonpath-iregexp-04
> 
> -- 
> JSONpath mailing list
> JSONpath@ietf.org
> https://www.ietf.org/mailman/listinfo/jsonpath
> -- 
> JSONpath mailing list
> JSONpath@ietf.org
> https://www.ietf.org/mailman/listinfo/jsonpath

v2.23.0 | Report a Bug | By Email