[WEB SECURITY] Repository of site URL structures?

Chris Weber chris at casabasecurity.com
Tue Jun 21 13:49:53 EDT 2011

What are you trying to do Robert?  I've been amassing a list of URIs and
IRIs for testing purposes, you can check it out here:


Webkit also has a testing suite at
http://trac.webkit.org/browser/trunk/LayoutTests/fast/url/ Note: I'm in
process of incorporating all of these tests into my test.xml above.

Everyone is definitely not following the RFC guidelines consistently.  I
built a test harness that correlates the DOM parsing of these URIs with the
HTTP request and the DNS queries.  The differences are dramatic in some


-----Original Message-----
From: websecurity-bounces at lists.webappsec.org
[mailto:websecurity-bounces at lists.webappsec.org] On Behalf Of Robert A.
Sent: Tuesday, June 21, 2011 10:36 AM
To: websecurity at lists.webappsec.org
Subject: [WEB SECURITY] Repository of site URL structures?

Hello everyone,
Is anyone aware of a site that contains a list of funky url structures used
by production sites? I am not looking for a reply telling me I should look
at the RFC guidelines because not everyone may be following them.

- Robert

The Web Security Mailing List

WebSecurity RSS Feed

Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA

WASC on Twitter

websecurity at lists.webappsec.org

More information about the websecurity mailing list