On Mon, 10 Jan 2005 00:10:24 -0800, Per Bothner <xxxxxx@bothner.com> wrote:
> felix winkelmann wrote:
>
> > - It should be apparent that generalizing this all to URIs brings with it
> >   some security issues
>
> I don't see this.  I can see trouble if a Bad Guy gets an
> application to look for a resource using a bad URI.  But how is this
> different from getting an application to look for the resource using
> a bad local path?

The former looks like a much greater security risk to me.

cheers,
felix