Discussion:
[Sip-implementors] Validation of Alert-Info header value
Pramida Tumma
2014-06-06 11:37:48 UTC
Permalink
Hi,


Is the below value acceptable in the Alert-Info header value?

$@#$%^&*()_+{}:"<>?

If the value is sent as

$@#$%^&*()_+{}:<>? with out a single double quote ", the INVITE is being
sent by UAC and is being accepted by UAS. If the value is sent as
$@#$%^&*()_+{}:"<>?" with two double quotes " ", the INVITE is being sent
by UAC and is being accepted by the UAS.

If there are any open ended symbols like single parenthesis "(" or single
bracket "[" or single flower bracket "{" or single double quotes ' " ",
INVITE is being retransmitted.

Do we need to validate the header value in this case? If so, what are the
things to be considered? One thing is to check if there are any open ended
symbols as above. Are there any other things to consider while validation?

Regards
Pramida Tumma
Brett Tate
2014-06-06 15:58:54 UTC
Permalink
Post by Pramida Tumma
Is the below value acceptable in the Alert-Info header value?
The following is the ABNF. I'm not sure what Alert-Info header position
applies to your question.

Alert-Info = "Alert-Info" HCOLON alert-param *(COMMA alert-param)
alert-param = LAQUOT absoluteURI RAQUOT *( SEMI generic-param )
Paul Kyzivat
2014-06-06 16:12:29 UTC
Permalink
I agree with Brett. It is unclear exactly what you are asking.

Also, *why* are you asking? Do you want to use something peculiar? Or
are you receiving something that is causing you grief?

Note that there are inherent problems with Alert-Info - if sent from
caller to callee there can be trust issues in whether you want to
attempt to dereference the URI. If you are actually interested in using
Alert-Info then you might want to look at:

http://tools.ietf.org/html/draft-ietf-salud-alert-info-urns-12

It is almost done - soon to become an RFC.

Thanks,
Paul
Post by Brett Tate
Post by Pramida Tumma
Is the below value acceptable in the Alert-Info header value?
The following is the ABNF. I'm not sure what Alert-Info header position
applies to your question.
Alert-Info = "Alert-Info" HCOLON alert-param *(COMMA alert-param)
alert-param = LAQUOT absoluteURI RAQUOT *( SEMI generic-param )
_______________________________________________
Sip-implementors mailing list
Sip-implementors at lists.cs.columbia.edu
https://lists.cs.columbia.edu/mailman/listinfo/sip-implementors
Loading...