You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
java implementation: pkg:docker/cassandra@sha256%3A244fd47e07d1004f0aed9c
go implementation: pkg:docker/cassandra@sha256:244fd47e07d1004f0aed9c
python implementation: pkg:docker/cassandra@sha256:244fd47e07d1004f0aed9c
As we can see, the colon : will be encoded as %3A in java implementaion, but not in other languages.
According to the specification of purl
the '#', '?', '@' and ':' characters must NOT be encoded when used as separators. They may need to be encoded elsewhere
the ':' scheme and type separator does not need to and must NOT be encoded. It is unambiguous unencoded everywhere
I think : must NOT be encoded.
The text was updated successfully, but these errors were encountered:
Converting ':' to "%3A" is perfectly valid and matches java.net.URLEncoder, but it's unfortunate that the "canonical" representation cannot be agreed on by the implementations.
dwalluck
added a commit
to dwalluck/packageurl-java
that referenced
this issue
Feb 20, 2025
There are inconsistencies with colon encoding in different languages.
For the following input:
output:
As we can see, the colon
:
will be encoded as%3A
in java implementaion, but not in other languages.According to the specification of purl
I think
:
must NOT be encoded.The text was updated successfully, but these errors were encountered: