urlrfc3986

Is http://mydomain.com/me@mail.com safe to use as URL?

I consider to setup a server to deal with URLs including email address such as

http://mydomain.com/me@mail.com

According to RFC  3986, I userstand @ is reserved on authority part = //mydomain.com/, but unreserved on path part /......., so currently I assume it's ok to use email address on pass.

Having said that, I still not sure if it is safe to use like http://mydomain.com/me@mail.com on production.

Please advise. Thanks.

Solution

  • It's fine—your interpretation of the RFC is correct, and there's no "risk" (in terms of browsers doing the wrong thing) for using an @ in the URI portion.