IETF Logo Mail Archive

Re: Link relation types for non-GET links

Klaus Hartke <hartke@tzi.org> Sat, 15 August 2015 12:17 UTC

Return-Path: <hartke@tzi.org>
X-Original-To: link-relations@ietfa.amsl.com
Delivered-To: link-relations@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 231A51A700D for <link-relations@ietfa.amsl.com>; Sat, 15 Aug 2015 05:17:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.971
X-Spam-Level:
X-Spam-Status: No, score=0.971 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, FM_FORGED_GMAIL=0.622, HELO_EQ_DE=0.35] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9BMuC-mTkI6v for <link-relations@ietfa.amsl.com>; Sat, 15 Aug 2015 05:17:32 -0700 (PDT)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 868A61A700A for <link-relations@ietf.org>; Sat, 15 Aug 2015 05:17:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id t7FCHTx1011890 for <link-relations@ietf.org>; Sat, 15 Aug 2015 14:17:29 +0200 (CEST)
Received: from mail-ig0-f181.google.com (mail-ig0-f181.google.com [209.85.213.181]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3mtgcn0kgPz4vVd for <link-relations@ietf.org>; Sat, 15 Aug 2015 14:17:29 +0200 (CEST)
Received: by igfj19 with SMTP id j19so29034408igf.0 for <link-relations@ietf.org>; Sat, 15 Aug 2015 05:17:27 -0700 (PDT)
X-Received: by 10.50.60.37 with SMTP id e5mr8299457igr.91.1439641047487; Sat, 15 Aug 2015 05:17:27 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.79.39.210 with HTTP; Sat, 15 Aug 2015 05:16:48 -0700 (PDT)
In-Reply-To: <55CC8C1D.9060900@gmx.de>
References: <CAAzbHvb==Sn_4UUFHKs3H9GYbEfiX=TUjv4FSmNi9R4NEB+DvQ@mail.gmail.com> <CAPW_8m5CU++j=8tNBK1Q7KszxsfORnK1-6mxcgUwz9X2R2JTyA@mail.gmail.com> <CAAzbHvZGYGNOkuAkc7Fu29maDcbjSf_o54q93Xa+Ggk_fkGHAw@mail.gmail.com> <55CC8C1D.9060900@gmx.de>
From: Klaus Hartke <hartke@tzi.org>
Date: Sat, 15 Aug 2015 14:16:48 +0200
Message-ID: <CAAzbHva19zw8tzKxSxhMFUSV0RLMFjq94Pb5Z4mc8GseEgrkBw@mail.gmail.com>
Subject: Re: Link relation types for non-GET links
To: Julian Reschke <julian.reschke@gmx.de>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <http://mailarchive.ietf.org/arch/msg/link-relations/XpAPjrqly8KLhdCDNihxI4pwIxg>
Cc: link-relations <link-relations@ietf.org>
X-BeenThere: link-relations@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <link-relations.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/link-relations>, <mailto:link-relations-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/link-relations/>
List-Post: <mailto:link-relations@ietf.org>
List-Help: <mailto:link-relations-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/link-relations>, <mailto:link-relations-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 15 Aug 2015 12:17:34 -0000

Julian Reschke wrote:
>> How does a spider distinguish between safe links and unsafe non-GET links?
>
> A spider is not supposed to use methods other than GET, so how is this a
> problem?

If the spider does not know the link relation type, it will assume
that there is a safe link between the two resources even when the link
relation type defines the link to be unsafe. But maybe that's not a
big problem.

It's just that HTML defines a number of syntactically different
hypermedia controls (<a>, <img>, <form>), so a spider can understand
whether the link is safe or not even if it does not recognize the link
relation type.

Klaus

v2.23.0 | Report a Bug | By Email