[907] This document is an implementation of Web transport protocols.
Fetch and connections
[908] The request's current server urlrequest's current server url
is a URL record. Once a value is set, the current server urlrequest's server url
is that value. Otherwise, the current server urlrequest's current server url
is same as its current urlrequest's current url.
This field can be used to implement a reverse proxy.
[1303] In the basic fetch, when request's current urlrequest's current url's
schemeURL scheme is ftpftp:,
return the result of performing an HTTP fetch using request.
[896] To modify request's header listrequest's header list per HTTP
in HTTP-network-or-cache fetch, run these steps:
[898] Append Accept-Encoding header, if necessary.
REQUIRED for Web compat docs.github.com
[897] Append DNT header, if necessary.
[899] Append Upgrade-Insecure-Requests header, if necessary.
[1304] In the steps to obtain a connection, to choose a connection
for originorigin from the user agent's connection pool, run these steps:
[1305] If origin's schemeURL scheme is ftpftp::
[1306] Return null.
[1307] Otherwise:
[1308] Return a connection whose
to be closed is false,
状態 is 「初期」 or 「要求待ち」, and
WebSocket接続の状態 is null in the user agent's connection pool,
if any, or null.
[1325] In the steps to obtain a connection, just before establishing an HTTP connection,
run these steps:
[1326] Wait until implementation dependent constraints on the number of relevant
connections in the user agent's connection pool is small enough.
If the user agent detects an idle connection in its connection pool,
it may choose to abort that connection.
[822] In the steps to obtain a connection, to establish an HTTP connection,
run these steps:
[808] Let transport be the result of
establishing a transportestablish a transport.
request url
the request's current urlrequest's current url
server url
the request's current server urlrequest's current server url
credentials
true
acceptSslCerts
the request's acceptSslCerts flag
user agent
the user agent
skip DNS cache
whether the request's cache mode
is either one of no-cache, reload, and no-store, or not
[823] If transport is a failure:
[824] Return a failure.
[1296] Otherwise, if transport's http protocoltransport's http protocol
is http2:
[932] Otherwise, if transport's http protocoltransport's http protocol
is ftp:
[934] If the HTTP-network-or-cache fetch steps set credentials to the request:
[935] Set username and password to the appropriate values.
[1285] Otherwise:
[1286] Set username to anonymous.
[1287] Set password to User@.
[933] Let connection be the result of
initiating an FTP connectioninitiate an FTP connection
with transport, username, and password.
[1291] Wait until connection's established promiseFTP connection's established promise
is resolved or rejected.
[1292] If connection's established promiseFTP connection's established promise
is resolved:
[1293] Return ftp.
[1294] Otherwise:
[1295] Return a failure.
[825] Otherwise:
[826] Return an HTTP connection:HTTP connection
endpoint typeconnection's endpoint type
client
transportconnection's transport
transport
[809] To obtain a WebSocket connection for url, run these steps:
[821] Let transport be the result of
establishing a transportestablish a transport.
request url
url
server url
url
acceptSslCerts
the request's acceptSslCerts flag
user agent
the user agent
ws
true
skip DNS cache
whether the request's cache mode
is either one of no-cache, reload, and no-store, or not
[827] If transport is a failure:
[828] Return a failure.
[829] Otherwise:
[830] Return an HTTP connection:HTTP connection
endpoint typeconnection's endpoint type
client
transportconnection's transport
transport
[607] To wait for other connections of host, port, and ws
in user agent, run these steps:
[1324] If ws is false, abort these steps.
[831] If host is a domain:
[832] Let n be an implementation dependent small number.
[833] Otherwise:
[834] Let n be 1.
[835] Wait while the number of connectionsconnection with the following
conditions is not less than n:
It is in user agent's connection pool.
Its remote hosttransport's remote host is host.
Its remote porttransport's remote port is port.
Its WebSocket接続の状態 is CONNECTING.
[1336] To establish a WebSocket connection, given a url,
protocols, and client, run these steps:
[1337] Let requestURL be a copy of url, with its
schemeURL scheme set to "httphttp:", if url's schemeURL scheme
is "wsws:", and to "httpshttps:" otherwise.
[1338] Let request be a request:Requestrequest
urlrequest's url
url
clientrequest's client
client
skip-service-worker flag
true
synchronous flag
true
moderequest mode
websocket
credentials mode
include
cache mode
no-store
redirect mode
error
WebSocket subprotocols
protocols
[1339]Fetchfetchrequest with process response>>1348
and process response done>>1342.
[1348] The process response with response is as follows:
[1340] If response is not a network error and
response's WebSocket connection established is true:
[1346]The WebSocket Connection is Established with:
Extensions In Use
response's header listresponse's header list's
`Sec-WebSocket-Extensions` header's value, if any, or null
Subprotocol In Use
response's header listresponse's header list's
`Sec-WebSocket-Protocol` header's value, if any, or null
[1342] The process response done with response is as follows:
[1345] Let exit status be response's exit statusresponse's exit status.
[1350] If exit status is null:
[1351] Set exit status to an exit status whose 失敗 is false.
[1343]The WebSocket Connection Is Closed with:
Fail The WebSocket Connection
exit status's 失敗
cleanly
exit status's WebSocket cleanly is true
The WebSocket Connection Close Code
exit status's WebSocket状態符号
The WebSocket Connection Close Reason
exit status's WebSocket理由文字列
[838] To make an HTTP request over connection using request
in HTTP-network fetch,
with credentials flag and optional not retryable flag,
run these steps:
[1344] Configure connection such that any notification is handled by >>839,
which uses websocket data type and websocket data.
[837] If connection's transportconnection's transport's
http protocoltransport's http protocol is http2:
[930] If connection's transportconnection's transport's
http protocoltransport's http protocol is ftp:
[1289]Send an FTP requestsend an FTP requestrequest over connection.
[931] Otherwise:
[541] If connection's transportconnection's transport's
request mode is HTTP proxy:
[845] Let target be request's originpathquery.
[843] Otherwise:
[844] Let target be request's current urlrequest's current url's pathquery.
[901] Let host header be request's current urlrequest's current url's hostport.
[900] Append Host/host header to request's header listrequest's header list.
[905] Append Connection/keep-alive to request's
header listrequest's header list.
[840] Send an HTTP request over connection.HTTP request
要求メソッド
request's methodrequest method
要求対象
target
ヘッダーリスト
request's header listrequest's header list
本体
request's bodyrequest body
moderequest mode
request's moderequest mode
[839] Any notification msg from connection is processed as follows,
switched by msg's type:
要求の本体の一部の送信の通知
Process transmitted as follows:
Increase request's bodyrequest body stream's transmitted bytes
要求の送信完了の通知
Set request's bodyrequest body stream's done flag
応答のヘッダー受信完了の通知
Process http response and
WebSocket connection established as follows:
[856] If connection's transportconnection's transport's
request mode is notHTTP proxy and
http response's 状態符号 is 407:
[857] Set response to a network error.
[858] Otherwise:
[841] Set response to a response:Responseresponse
statusstatus code
http response's 状態符号
status message
http response's 理由句
header listresponse's header list
http response's ヘッダーリスト
HTTPS state
connection's transportconnection's transport's
HTTPS stateconnection's HTTPS state
WebSocket connection established
WebSocket connection established
[892] If connection's transportconnection's transport's
protocoltransport's protocol is
tls and connection's transportconnection's transport's
has alert is false:
[893] Process the HSTS header of response, if any.
[894] Process the PKP headers of response, if any.
[842] Now headers are transmitted. Return response.
datastart の通知
Process data type as follows:
[537] If request's moderequest mode is websocket:
[1360] Set websocket data type to data type.
[1349] If data type is Text:
[538] Set websocket data to the empty string.
[1352] Otherwise:
[1353] Set websocket data to the empty byte string.
data の通知
Process data as follows:
[1354] If request's moderequest mode is websocket:
[1356] Append data to websocket data.
[1355] Otherwise:
Write data to response's bodyresponse body stream
dataend の通知
[1357] If request's moderequest mode is websocket:
[1359]A WebSocket Message Has Been Received with:
type
websocket data type
data
websocket data
[1358] Otherwise:
Set response's bodyresponse body stream's done flag
wsclosing の通知
The WebSocket Closing Handshake Is Started.
完了の通知
Process http response and exit status as follows:
[851] If exit status's 失敗 is true:
[852] If headers are transmitted:
[855] Mutate response into a network error whose
exit statusresponse's exit status is exit status.
[257] Otherwise, if not retryable is false,
exit status's can retryexit's can retry is true, and
the user agent wants to retry the request:
[882] Let connection be the result of
obtaining a connectionobtain a connection, given request's
current urlrequest's current url's origin and credentials.
[883] If connection is a failure, return a network error
and abort these steps.
[884] Return the result of recursively making an HTTP request
over connection using request,
with credentials flag, with not retryable flag set.
[854] Otherwise:
[853] Return a network error whose exit statusresponse's exit status
is exit status.
[247] The user agent might not want to retry the request because, e.g.,
there is a request body specified as a ReadableStream.
[1347] A response has following additional fields:
exit statusresponse's exit status
An exit status or null. Initially, null.
incomplete messageresponse's incomplete message flag
A boolean. Initially, false.
WebSocket connection established flag
A boolean. Initially, false.
Hosts and ports
[323] An IP address is an IPv4 address or IPv6 address.
[365] A port is a 16-bit unsigned integer.
Name resolution
[1278] A user agent has DNS cache, which is a map from
a domain to a pair of (address (IP address or failure),
expires (number)).
[1328] The DNS cache has an associated monotonic clock,
which is an implementation dependent monotonic clock.
[1281] The DNS cache timeout is 60 seconds.
[369] The underlying platform is expected to provide the way to
resolve a name, which receives a string host string
and a booleanskip DNS cache and returns a IP address or failure.
If the platform does not support a feature equivalent to
skip DNS cache, it MUST be ignored.
[509] It asynchronously returns.
[615] The user agentuser agent's name resolution steps
for hosthost and optional booleanskip DNS cache (whose
default is false) are:
[616] If host is a domain:
[1309] If skip DNS cache is false:
[1283] Let cached be user agent's DNS cache [ host ].
[1310] Otherwise:
[1311] Let cached be null.
[1280] Let now be the current value of user agent's DNS cache's monotonic clock.
[1284] If cached is null or cached's expires is a time after
now:
[402] Let host string be the result of serializinghost serializerhost.
[617] Let addr be the result of resolvingresolve a namehost string with skip DNS cache.
[1377] If addr is an IPv4 address in the range 0.0.0.0/8:
[1380] Set addr to a failure.
[1279] Set user agent's DNS cache [ host ]
to (addr, DNS cache timeout after now).
[1282] Return addr.
[1312] Otherwise:
[1313] Return cached's address.
[618] Otherwise:
[619] Return host.
[508] These steps asynchronously return an IP address or failure.
Verification of service identity
[943] The service identity verification steps for host and
certificate are these steps:
[947] Let domains be a list of the dNSName values in certificate's
subjectAltNameextensionTLS extension, if any.
[948] Let addresses be a list of the iPAddress values in certificate's
subjectAltNameextensionTLS extension, if any.
[949] If all of these conditions are true:
[964]domains is empty
[965]addresses is empty
[966]certificate's subject field has any CN value
[967] Let cn be certificate's subject field has
the first CN value.
[968] Otherwise:
[969] Let cn be null.
[944] If host is a domain:
[958] For each domain in domains:
[957] If hostcertificate-domain-pattern matchescertificate-domain-pattern matchdomain:
[959] Return true and abort these steps.
[970] If cn is not null and
hostcertificate-domain-pattern matchescertificate-domain-pattern matchcn:
[971] Return true and abort these steps.
[945] Otherwise, if host is an IPv4 address:
[954] For each address in addresses:
[955] If address represents the same IPv4 address as host:
[956] Return true and abort these steps.
[963] If cn is the result of applying IPv4 serializer to host:
[972] Return true and abort these steps.
[946] Otherwise, if host is an IPv6 address:
[950] For each address in addresses:
[951] If address represents the same IPv6 address as host:
[952] Return true and abort these steps.
[953] Return false.
[960] Whether a domaindomain certificate-domain-pattern matchescertificate-domain-pattern match
a string pattern or not is the value returned by the following steps:
[962] If the last character of pattern, if any, is a . character:
[973] Return false and abort these steps.
[975] Let canonicalized pattern be pattern, converted to ASCII lowercase.
[974] If domain is canonicalized pattern, optionally followed by
a . character:
[976] Return true and abort these steps.
[977] If the first two characters of canonicalized pattern, if any, is *.:
[979] Remove the first two characters from canonicalized pattern.
[980] If canonicalized pattern does not contain any . character,
or canonicalized pattern is an ICANN public suffix:
[982] Return false and abort these steps.
[983] If domain is one or more characters,
followed by canonicalized pattern, optionally followed by a . character:
[984] Return true and abort these steps.
[978] Return false.
[1327] A string string is an ICANN public suffix if
the public suffix of string is string
when only ICANN domains are taken into account.
URLs
[1058] The hostport of a URL recordurl is the concatenation of:
[1059]host
[902] If url's port is not null:
[903]:
[904]url's port, serializedserialize an integer
[622] The effective port of url is the value returned by these steps:
[623] Let port be url's portURL's port.
[624] If port is null:
[625] Set port to the value determined by the url's schemeURL scheme:
ftp
21
http
80
https
443
[626] Return port.
[1057] The pathquery of a URL recordurl is the concatenation of:
[846]/
[847] The strings in url's path, separated from each other by /
[848] If url's query is not null:
[849]?
[850]url's query
[1299] The originpathquery of a URL recordurl is the
value returned by these steps:
[1300] Set clone be a copy of url.
[1301]Strip clone for use as a referrerStrip <var xmlns="http://www.w3.org/1999/xhtml">url</var> for use as a referrer.
[1302] Return the result of applying the URL serializer to clone.
[1056] The proxy environment variable parser for string valueMUST run these steps:
[1028] If value does not begin with a schemeURL scheme (syntax)
followed by ://:
[1316] prepend http:// to value.
[1029] Return the result of applying the URL parser to value.
[1318] These steps can return a URL record or a failure.
Proxies
[1314] A user agentuser agent has get proxies steps,
which are invoked with user agent and URL recordurl.
The get proxies steps must return a list of zero or more proxy configuration
objects.
[1052]url's schemeURL scheme has to be a network scheme.
[612] A proxy configuration has protocolproxy's protocol, which is one of:
tcp,
unix,
http,
https,
socks4, and
socks5.
[1017] The value tcp represents direct access (i.e. no proxy).
[613] A proxy configuration whose protocolproxy's protocol is
http, https, socks4, or socks5 has
hostproxy's host, whose value is a host, and
portproxy's port, whose value is an integer or null.
The initial value of the portproxy's port is null.
[543] A proxy configuration whose protocolproxy's protocol is
http or https has usernameproxy's username,
whose value is a string,
and passwordproxy's password, whose value is a string or null.
The initial value of the usernameproxy's username is the empty string.
The initial value of the password is null.
[614] A proxy configuration whose protocolproxy's protocol is
unix has pathproxy's path, whose value is a byte string.
[1315] The get proxies steps are implementation dependent. Following
subsections include examples of such steps.
Proxy configurations from environment variables
[1043] This subsection applies to a user agent that supports environment variable
based proxy configurations.
[1317] A user agent has following states:
HTTP proxy
A proxy configuration or null.
HTTPS proxy
A proxy configuration or null.
FTP proxy
A proxy configuration or null.
no proxy hosts
A list of hosts.
[836] Upon initialization, a user agentMUST run these steps:
[1021] Set user agent's HTTP proxy to the result of
parsing environment variableparse an environment variablehttp_proxy.
[1022] Set user agent's HTTPS proxy to the result of
parsing environment variableparse an environment variablehttps_proxy.
[1023] Set user agent's FTP proxy to the result of
parsing environment variableparse an environment variableftp_proxy.
[1037] Let no_proxy be the result of
getting the environment variableget an environment variableno_proxy.
[1038] If no_proxy value is not null and is not the empty string:
[1039] For each substring value obtained by splitting no_proxy value
by a , character:
[1040] Remove any leading and trailing C0 controls and space characters
from value.
[1041] Let host be the result of applying the host parser to value.
[1042] If host is not an error,
append host to user agent's no proxy hosts.
[1024] To parse an environment variable whose name is name,
run these steps:
[1025] Let value be the result of
getting the environment variableget an environment variablename.
[1026] If value is null or the empty string:
[1027] Return null and abort these steps.
[1055] Let url be the result of applying the proxy environment variable parser
to value.
[1030] If url's schemeURL scheme is httphttp:
or httpshttps::
[1031] Return a proxy configuration.Proxy configurationproxy configuration
protocolproxy's protocol
url's schemeURL scheme
hostproxy's host
url's hostURL's host
portproxy's port
url's portURL's port
usernameproxy's username
url's usernameURL's username
passwordproxy's password
url's passwordURL's password
[1032] Otherwise, if url's schemeURL scheme is socks4socks4:
or socks5socks5: and url's hostURL's host is not null:
[1033] Return a proxy configuration.Proxy configurationproxy configuration
protocolproxy's protocol
url's schemeURL scheme
hostproxy's host
url's hostURL's host
portproxy's port
url's portURL's port
[1034] Otherwise:
[1035] The user agentMAY report an error and MAY
terminate the user agent.
[1036] Return null.
[1045] To get an environment variable with string name, run these steps:
[1047] Let value be the value of the user agent's process's
environment variable whose name is name, if any, or the empty string.
[1290] Let uc name be name, converted to ASCII uppercase.
[1373] Let uc value be the value of the user agent's process's
environment variable whose name is uc name, if any, or the empty string.
[1046] If value is not the empty string and value is not uc value:
[1049] Let encoding be the encoding of the platform.
[1048] Return the result of decodingdecodevalue in encoding.
[1050] Otherwise:
[1051] Return null.
[1374] For security, uppercase environment variable HTTP_PROXY
cannot be used.
[1000] The get proxies steps for url are these steps:
[1018] For each hosthost in user agent's no proxy hosts:
[1019] If hostequalshost equivalenceurl's host:
[1020] Return a list whose only member is a proxy configuration
whose protocolproxy's protocol is tcp and abort these steps.
[611] If url's schemeURL scheme is httphttp: and
user agent's HTTP proxy is not null:
[1012] Return a list whose only member is user agent's HTTP proxy
and abort these steps.
[1013] If url's schemeURL scheme is httpshttps: and
user agent's HTTPS proxy is not null:
[1014] Return a list whose only member is user agent's HTTPS proxy
and abort these steps.
[1015] If url's schemeURL scheme is ftpftp: and
user agent's FTP proxy is not null:
[1016] Return a list whose only member is user agent's FTP proxy
and abort these steps.
[546] Return a list whose only member is a proxy configuration
whose protocolproxy's protocol is tcp.
[1319] This subsection applies to a user agent which is configured to
use a PAC script to choose appropriate proxies.
[1320] A user agent has following states, whose values can be configured by
the user:
PACURL
A URL record or null.
use WPAD flag
A boolean.
[1004] A user agent has a PAC script, which is initially null.
[1001] The user agentMUST send appropriate WPAD request
if its use WPAD flag is true.
[1003] If a PACURL is provided by WPAD processing,
the user agentMUSTfetch the PAC file.
Otherwise, if PACURL is not null,
the user agentMUSTfetch the PACURL.
When a PAC script file is fetched, the user agent's
PAC scriptMUST be set to the file.
[1321] The get proxies steps for url are these steps:
[544] If user agent's PAC script is not null:
[545] Process user agent's PAC script with url.
[1011] Return the result of the previous step and abort these steps.
[1322] Return a list whose only member is a proxy configuration
whose protocolproxy's protocol is tcp.
Transports
[640] A transport has following states:
[408]Transporttransport
protocoltransport's protocol
One of
tcp,
unix,
http1connect,
http2connect,
tls,
socks4, and
socks5.
endpoint typetransport's endpoint type
Either client or server.
http protocoltransport's http protocol
Either http1, http2, or ftp.
The default is http1.
The value is either default or HTTP proxy.
If the request mode of a transport is HTTP proxy,
a request has to be sent over the transport as an HTTP request
whose request target is an absolute URL.
HTTPS statetransport's HTTPS state
An HTTPS state value. Either none, deprecated, or modern.
The default is none.
[819] There are also protocoltransport's protocol dependent
additional states.
[38] An exit status has following states:
[469]Exit statusexit status
リセット
真か偽。既定値は偽。
失敗
真か偽。
WebSocket cleanly
真か偽か null。既定値は null。
WebSocket状態符号
整数か null。既定値は null。
WebSocket 理由
文字列か null。既定値は null。
can retryexit's can retry
A boolean. The default is false.
[1054] To create a transport for a proxy configuration proxy
with a URL recordurl and optional ws and skip DNS cache
flags in user agent,
run rhese steps:
[549] If user agent does not support proxy's protocol:
[550] Return a failure and abort these steps.
[551] Switch by proxy's protocol:
tcp
[552] Set effective port be the effective port of url.
[553] Set addr to the result of applying name resolution steps
to url's hostURL's host with skip DNS cache in user agent.
[554] If addr is an error:
[555] Return a failure and abort these steps.
[557]Wait for other connectionswait for other connections of
addr, port, and ws in user agent in user agent.
[558] Return the result of
establishing a TCP transportestablish a TCP transport
to addr and effective port.
unix
[559] Return the result of
establishing a UNIX socket domain transportestablish a UNIX socket domain transport
with proxy's pathproxy's path, url's hostURL's host,
and url's effective port.
http or https
[560]Wait for other connectionswait for other connections of
url's hostURL host, port, and ws in user agent.
[561] Let proxy port be proxy's port.
[562] If proxy port is null:
[563] If proxy's protocol is http, set proxy port to 80.
[564] If proxy's protocol is https, set proxy port to 443.
[565] Let proxy addr be the result of applying name resolution steps
to proxy's host in user agent.
[566] If proxy addr is an error:
[567] Return a failure and abort these steps.
[568] Let transport be the result of
establishing a TCP transportestablish a TCP transport
to proxy addr and proxy port.
[570] If proxy's protocol is https:
[571] Set transport to the result of running the TLS steps for
transport and proxy's host.
[556] If transport is a failure:
[569] Return a failure and abort these steps.
[572] If url's schemeURL scheme is https:
[577] Let http be an HTTP connection:HTTP connection
endpoint typeconnection's endpoint type
client
transportconnection's transport
transport
[578] Set transport to the result of
establishing an HTTP CONNECT transportestablish an HTTP <code xmlns="http://www.w3.org/1999/xhtml" class="HTTP" xml:lang="en">CONNECT</code> transport
with http and url.credentials flag and proxy credentials
[579] If transport is a failure whose HTTP response's status is
407:
Show proxy auth dialog
[580] Otherwise:
[581] Set transport's request mode to HTTP proxy.
[548] Return transport.
socks4
[582] Let effective port be the effective port of url.
[583] Set addr to the result of applying name resolution steps
to url's host with skip DNS cache in user agent.
[584] If addr is not an IPv4 address:
[585] Return a failure and abort these steps.
[587]Wait for other connectionswait for other connections of
addr, port, and ws in user agent.
[588] Let proxy port be proxy's port.
[589] If proxy port is null, set proxy port to 1080.
[590] Let proxy addr be the result of applying name resolution steps
to proxy's host in user agent.
[591] Let transport be the result of
establishing a TCP connectionestablish a TCP connection
to proxy addr and proxy port.
[592] Return the result of
establishing a SOCKS4 connectionestablish a SOCKS4 connection
with transport, addr, and effective port.
socks5
[593] Let effective port be the effective port of url.
[594]Wait for other connectionswait for other connections of
url's hostURL host, port, and ws in user agent.
[595] Let proxy port be proxy's port.
[597] If proxy port is null, set proxy port to 1080.
[596] Let proxy addr be the result of applying name resolution steps
to proxy's host in user agent.
[598] Let transport be the result of
establishing a TCP transportestablish a TCP transport
to proxy addr and proxy port.
[599] Return the result of
establishing a SOCKS5 transportestablish a SOCKS5 transport
with transport, url's host, and effective port.
[634] These steps asynchronously return.
[542] To establish a transport for URL records request url and
server url
and a user agentuser agent, optionally with credentials, ws,
acceptSslCerts,
and skip DNS cache flags, run these steps:
[936] Assert: request url's schemeURL scheme is a network scheme.
[909] Assert: Either server url's schemeURL scheme is httphttp:
or server url is request url.
[1009] Let proxies be the result of getting proxiesget proxies for
server url in user agent.
[547] For each proxy in proxies, in order, run these substeps:
[1053] Set transport to the result of
creating a transport for proxycreate a transport for a proxy configurationproxy with server url, ws, and skip DNS cache.
[600] If transport is not a failure:
[601] If request url's schemeURL scheme is httpshttps::
[602] Set transport to the result of running the TLS steps for
transport, request url's host, credentials flag, ws flag,
and acceptSslCerts flag, in user agent.
[603] Otherwise, if transport's request mode is notHTTP proxy and
request url's schemeURL scheme is ftpftp::
[929] Set transport's http protocoltransport's http protocol to ftp.
[927] If transport is not a failure:
[1182] Set transport's proxy configurationtransport's proxy configuration
to proxy.
[1435] A transport whose protocoltransport's protocol is
tcp has following additional states:
remote hosttransport's remote host
A host.
remote porttransport's remote port
A port.
local hosttransport's local host
A host.
local porttransport's local port
A port.
tcp connectiontransport's tcp connection
A TCP connection.
[742] To TCP connect to hosthost and portport,
establish a connection to host and port as described in TCP
specifications and asynchronously returns a new TCP connection
representing the connection if the connection is established,
or failure if the connection cannot be established.
A TCP connection has
local addressTCP connection's local address, which is an IP address,
and local portTCP connection's local port, which is a port.
[1437] To set TCP options of TCP connectiontcp,
run these steps:
[420] Disable the SO_OOBINLINE option of tcp.
[424] Enable the SO_NODELAY option of tcp.
[437] Run the implementation dependent steps for setting TCP keep alive options, e.g.:
[635] Enable the SO_KEEPALIVE option of tcp.
[636] Set TCP_KEEPIDLE option of tcp to 45 seconds.
[637] Set TCP_KEEPINTVL option of tcp to 45 seconds.
[627] To establish a TCP transport to IP addressaddr and
portport, run these steps:
[1416] If addr is 127.0.53.53:
[1417] Return a failure and abort these steps.
[628] Let tcp be the result of invoking
TCP connect with addr and port.
[629] If tcp is failure:
[782] Return failure and abort these steps.
[674] Let transport be a new transport:[406]Transporttransport
protocoltransport's protocol
tcp
endpoint typetransport's endpoint type
client
remote hosttransport's remote host
addr
remote porttransport's remote port
port
local hosttransport's local host
tcp's local address
local porttransport's local port
tcp's local port
tcp connectiontransport's tcp connection
tcp
[641]Set TCP optionsset TCP options of tcp.
[818] Return transport.
[510] These steps asynchronously return.
[411] Whenever it accepts a TCP connectiontcp from
IP addressremote addr and portremote port,
a TCP server listening IP addressaddr and portportMUST run the TCP after accept steps with
tcp,
addr, port, remote addr, and remote port.
[524] The TCP after accept steps with
TCP connectiontcp,
IP addressaddr,
portport,
IP addressremote addr, and
portremote port are:
[414] Let transport be a new transport representing the
TCP connection, with following states:[417]Transporttransport
protocoltransport's protocol
tcp
endpoint typetransport's endpoint type
server
remote hosttransport's remote host
remote addr
remote porttransport's remote port
remote port
local hosttransport's local host
addr
local porttransport's local port
port
tcp connectiontransport's tcp connection
tcp
[1436]Set TCP optionsset TCP options of tcp.
[460] Optionally, run implementation dependent steps (e.g. DoS protection).
[877] A transport whose protocoltransport's protocol is
tls has following additional states:
is ev
A boolean.
The default is false.
remote certificates
A list of certificatescertificate.
has alert
A boolean.
The default is false.
[638] The TLS steps for transport, url, and credentials,
with optional ws and acceptSslCerts flags,
in user agent are as follows:
credentials
[878] If ws is true:
[879] Set alpn protocols to (http/1.1).
[880] Otherwise:
[881] Set alpn protocols to (h2, http/1.1).
If switched from HTTP/2 to HTTP/1.1
[356] Initiate TLS handshake.
Minimum TLS version
1.0
Underlying transport
transport
Compression
Disabled
TLS session cache
user agent's TLS session cache
SNI host
If url's host is a domain, url's host.
Otherwise, null.
Use OCSP stapling request
true
ALPN protocol namesALPN protocol name
alpn protocols
Certificate database
user agent's certificate database
Additional verification for server certificate cert
Return the result of running the service identity verification steps with
url's host and cert.
[861] If failed, return a failure and abort these steps.
[865] Let alpn be the ALPN protocol name obtained by the TLS handshake.
[872] Let version be the TLS protocol version in use.
[873] Let cipher be the cipher suite and parameters in use.
[866] If alpn is null or http/1.1:
[867] Set protocol to http1.
[868] Otherwise, if alpn is h2:
[869] Set protocol to http2.
[885] If one of the following conditions is met:
[887]version is 1.0 or 1.1
[888]cipher's cipher suite is blacklisted by the HTTP/2 specification
[890]cipher's parameter is disallowed by the HTTP/2 specification
connection error INADEQUATE_SECURITY
[886] Return a failure and abort these steps.
[870] Otherwise:
[871] Return a failure and abort these steps.
[874] Let certs be the received certificatescertificate.
[876] Let ev be whether certs contain a valid EV certificate or not.
[985] Let ocsp be the OCSP stapling response, if any, or null.
[993] For each cert in certs's CA certificatesCA certificate:
[994] If the result of running the certificate revocation verification steps
with certificate set to cert, certificate type set to CA certificate,
and ocsp set to null, is false:
[704] Return a failure and abort these steps.
[862] If the result of running the certificate revocation verification steps
with certificate set to certs's end entity certificate,
certificate type set to end entity, and ocsp, is false:
[704] Return a failure and abort these steps.
[705] Apply PKP verification for certs and url's host
in user agent.
[860] Let tls transport be a new transport that represents the TLS connection,
with following states:[1423]Transporttransport
protocoltransport's protocol
tls
endpoint typetransport's endpoint type
client
http protocoltransport's http protocol
protocol
is ev
ev
remote certificates
certs
[859] Set tls transport's HTTPS statetransport's HTTPS state
to modern or deprecated, as determined by an implementation dependent
algorithm whose inputs are version, cipher, certs,
and whether there are TLS warnings or not.
[906] Return tls transport.
[1376] If acceptSslCerts flag is set, ignore verification errors.[941] When SNI host is null, the TLS client is not expected to
send any SNIextensionTLS extension in the handshake.
[895] The certificate revocation verification steps for
certificate (a certificate),
certificate type (CA certificate or end entity certificate), and
ocsp (an OCSP response or null) are these steps:
[864] If the user agent's certificate database knows whether
cert has been revoked or not:
[875] Return true if cert has been revoked,
or false otherwise, and abort these steps.
[937] If ocsp is a valid OCSP response:
[999] Return true if cert has been revoked according to ocsp,
or false otherwise, and abort these steps.
[989] Otherwise, if cert has the OCSP must-staple option enabled:
[940] Return false and abort these steps.
[990] Let duration be cert's notAfter timestamp -
cert's notBefore timestamp.
[991] If duration is less than 10 days (i.e. cert is a short-lived certificate):
[992] Return true and abort these steps.
[863] Let ocsp url be cert's OCSPURL.
[995] If ocsp url is not null,
the implementation MAY run these substeps:
[996] Send an OCSP request for cert to ocsp url.
Set ocsp to the result.
[997] If ocsp is a valid OCSP response:
[986] Let result be true if cert has been revoked according to ocsp,
or false otherwise.
[998]Optionally, save result to the user agent's
certificate database as the cached verification result for cert.
[988] Return result and abort these steps.
unset EV flag (and set HTTPS state to deprecated?)
[987] Return true.
[523] These steps asynchronously return.[938]HTTPS state steps[939] is EV flag
[384] A user agent has TLS session cache and
certificate database.
[923] A TLS server, whenever its underlying transport accepts a connection,
MUST run these steps:
[928] Assert: The underlying transport protocol is
TCP or Unix domain socket.
[925] Let transport be the result of running
TCP after accept steps, if the underlying transport protocol is TCP, or
Unix domain socket after accept steps, otherwise.
[1424] Start TLS over transport.
[706] Optionally, perform implementation dependent verification of the client certificates.
OCSP stapling
If failed, ...
[1433] Let protocol be http/1.1.
ALPN: H2
[1431] Let certs be the received certificatescertificate.
[1426] Let tls transport be a new transport that represents the
TLS connection, with following states:[1430]Transporttransport
[266]Appendappend (header list) `Sec-WebSocket-Version`/`13`
to 要求's header listrequest's header list.
[1332] For each protocol in 要求's WebSocket subprotocols,
combinecombine (header list) `Sec-WebSocket-Protocol`/protocol
in 要求's header listrequest's header list.
[264]Let permessageDeflate be a user-agent defined "permessage-deflate"
extension header value.
[1333]Appendappend (header list)
`Sec-WebSocket-Extensions`/permessageDeflate to
要求's header listrequest's header list.
[57] Set connection's write mode to "websocket".
[241] Set connection's stream WebSocket subprotocols to 要求's
WebSocket subprotocols.
[491] Otherwise, if connection's stream request method is CONNECT:
[498] Set connection's write mode to "before tunnel data".
[274] 作成した WebSocketフレームのデータの各バイトについて、
先頭から i バイト目 (先頭が0バイト) であれば、
マスクキーの imod 4 バイト目 (先頭が0バイト)
と XOR した結果に差し替えます。
[275]connection's transportconnection's transport で WebSocketフレームのバイト列を送信することとします。
[107] If a request whose method is CONNECT has been sent and
a response whose status is 200 has been received, and
the connection is not yet closed,
one or more bytes can be sent over the connection.
That is, to send a byte string bytes over tunnel connection connection,
run these steps:
[335] Assert:In CONNECT mode
[109]connection's transportconnection's transport で
bytes の送信を指示します。
[110] エラーが返されたら、ここで停止します。
[1443] To close a tunnel connection connection, run these steps:
[1444] Run the sent steps for connection with close flag set to true.
[303]応答's header listresponse's header list has a
`Sec-WebSocket-Protocol` header and
connection's stream WebSocket subprotocols does not containlist contain応答's header listresponse's header list has a
`Sec-WebSocket-Protocol` header's value
[1329]connection's stream WebSocket subprotocols is not emptylist empty and
parsingparse a header `Sec-WebSocket-Protocol`
in 応答's header listresponse's header list results in null,
failure, or the empty byte sequence
... then run these substeps:
[294] Run the headers received steps for connection.
[248] Let exit status be a new exit status:Exit statusexit status
失敗
真。
cleanly
偽。
状態符号
1006。
理由
空文字列。
[245]Connection errorconnection errorconnection with exit status.
[146] それ以外なら、
[291]WebSocket接続の状態を、 OPEN に設定します。
[296] Run the headers received steps for connection,
with WebSocket flag set to true.
[292] Set connection's to be closed flag to true.
[293]状態を、「WebSocketフレーム前」に設定します。
[147]一時バッファーを、空に設定します。
[106] それ以外で、 応答の状態符号が 1xx なら、
[337] If connection's stream request method is CONNECT or
WebSocket接続の状態が CONNECTING なら、
[224]Connection errorconnection errorconnection.
[341] それ以外なら、
[342]応答のプロトコルの版、状態符号、理由句、ヘッダーリストを初期値に設定します。
[382]状態を、「応答前」に設定します。
[383]一時バッファーを、空バイト列に設定します。
[344] それ以外なら、
[316] Run the headers received steps for connection.
[385]要求について datastart を通知します。
[346]
[348]応答の状態符号が 204, 205,
304 のいずれかの場合か、
[349]connection's stream request method is HEAD
... のいずれかの場合、
[347]残り長さを、0に設定します。
[87]残り長さが 0 なら、
[79]応答に Connection:ヘッダーがあって
close (ASCII大文字・小文字不区別) 接続オプションが指定されていれば、
established promiseFTP connection's established promise
A promise.
Initially, an unresolved promise.
pathFTP connection's path
A byte string or null.
Initially, null.
object typeFTP connection's object type
Either unknown,
file, or directory. Initially, unknown.
file lengthFTP connection's file length
Either an integer or
null. Initially, null.
data lengthFTP connection's data length
An integer.
data transportFTP connection's data transport
A transport or null.
Initially, null.
data stateFTP connection's data state
Either initial state, data state, or exit state.
data connected promiseFTP connection's data connected promise
A promise.
is unauthorizedFTP connection's is unauthorized
A boolean.
Initially, false.
[1227] An FTP connection has similar notification hooks as HTTP connection.
Control connections
[573] To initiate an FTP connection with
a transporttransport,
a stringusername, and a stringpassword,
run these steps:
[575] Let ftp be a FTP connection.FTP connection
endpoint typeFTP connection's endpoint type
client
transportFTP connection's transport
transport
usernameFTP connection's username
username
passwordFTP connection's password
password
[1067] Let current code be null.
[1066] Let current text be an empty byte string.
[911] Configure transport to run these substeps whenever
it notifies of バイトの受信 with byte and urgent data flag:
[912] If urgent data flag is set, abort these substeps.
[1062] Append byte to ftp's read bufferFTP connection's read buffer.
[1094] Optionally, abort these substeps.
[1063] If byte contains a 0x0A byte:
[1064] Split ftp's read bufferFTP connection's read buffer
into two substrings at the first 0x0A byte.
Set line to the first substring and ftp's
read bufferFTP connection's read buffer to the second substring,
not including the 0x0A separator.
[1065] Remove the 0x0D byte at the end of line, if any.
[1075] If line has three 0x30-0x39 bytes followed by
a 0x20 or 0x2D byte at the beginning:
[1076] Let code be the first three bytes of line.
[1069] Let continue be whether the fourth byte of line is 0x2D or not.
[1077] Remove first four bytes from line.
[1078] If current code is null:
[1079] Set current code to code.
[1081] Set current text to line followed by 0x0D0x0A.
[1082] Otherwise, current code is code:
[1083] Append line followed by 0x0D0x0A to current text.
[1084] Otherwise:
[1085] Set current code to an error.
[1086] If current code is not an error:
[1087] Let reply be an FTP reply:
codeFTP reply's code
A string obtained by replacing bytes
in current code by code points with same values.
textFTP reply's text
current text
[1091] Run the FTP client state machine with ftp and reply.
[1070] Otherwise:
[1072] Set current code be null.
[1071] Set current text be an empty byte string.
[913] Configure transport to run these substeps whenever
it notifies of 正常終了の受信 or 中断 with reset flag:
[1060] Set is abort be whether the notification is about 中断 or not.
[1090] Let exit be
[1272] Run the FTP client state machine with ftp and null.
[1088] Return ftp.
[1104] To send FTP command command with argument text over ftp,
run these steps:
[1105] If text is null:
[1106] Send text followed by 0x0D0x0A over ftp.
[1107] Otherwise:
[1108] Send text followed by text followed by 0x0D0x0A
over ftp.
[1244] To switch to passive mode with ftp, run these steps:
[1137]If ftp's transportFTP connection's transport
is IPv6:
[1140]Set FTP stateset FTP state of ftp to PASV reply state.
[1138]Send FTP commandsend FTP command `EPSV` with null
over ftp.
[1139] Otherwise:
[1132]Set FTP stateset FTP state of ftp to EPSV reply state.
[1136]Send FTP commandsend FTP command `PASV` with null
over ftp.
[1068] An FTP reply has following states:FTP reply
codeFTP reply's code
A string.
textFTP reply's text
A byte string.
[1110] The FTP reply's first code is its codeFTP reply's code's
first character.
[1061] To set FTP state of FTP connectionftp to state,
run these steps:
[1096] If ftp's read bufferFTP connection's read buffer is not empty:
[1141] If reply is not null and
reply's first code is 2 :
[1131] If reply's text matches to the pattern
0x28 digits 0x2C digits 0x2C digits 0x2C digits 0x2C digits 0x2C digits 0x29,
where digits represents one or more bytes in range [0x30, 0x39]:
[1133] Let p1 and p2 be the first such match's last two
digits substrings, respectively, interpreted as decimal integers encoded in UTF-8.
[1143] Let port be p1 × 256 + p2.
[1144]Establish an FTP data connectionestablish an FTP data connection for ftp and
and port.
[1222] Increment ftp's data lengthFTP connection's data length.
[1233]ftp's data の通知 with byte.
[1220] If ftp's file lengthFTP connection's file length is not null and
ftp's file lengthFTP connection's file length is
ftp's data lengthFTP connection's data length:
[1223] Set data stateFTP connection's data state to exit state.
[1224]ftp's dataend の通知.
[1269]ftp's data transportFTP connection's data transport's
正常終了の送信の指示.
[1270] Set ftp's data transportFTP connection's data transport to null.
[1197] Configure transport to run these substeps whenever
it notifies of 正常終了の受信 or 中断 with is reset:
[1198] Set is abort be whether the notification is about 中断 or not.
[1199] Let exit be an exit status whose 失敗 is is abort
and リセット is is reset.
[1239] If ftp's data transport is transport or
ftp's data stateFTP connection's data state is exit state:
[1202] If ftp's data stateFTP connection's data state is
initial state:
[1203]Abort FTP connectionabort FTP connectionftp with exit.
[1204] Otherwise:
[1271] If ftp's data stateFTP connection's data state is
data state:
[1234]ftp's dataend の通知.
[1276] If
ftp's file lengthFTP connection's file length is not null and
ftp's file lengthFTP connection's file length is greater than
ftp's data lengthFTP connection's data length:
[1235]ftp's 完了の通知 with ftp's responseFTP connection's response
and exit.
[1237]ftp's data transportFTP connection's data transport's
正常終了の送信の指示.
[1240] Otherwise:
[1241]transport's 正常終了の送信の指示.
[1242] Resolve ftp's data connected promiseFTP connection's data connected promise.
[1211] The data connected steps with ftp are these steps:
[1229]ftp's 要求の送信完了の通知.
[1232] Set ftp's responseFTP connection's response to a response.Responseresponse
statusstatus code
200
status textreason phrase
OK
bodyresponse body
stream
If ?raw, plain text. Otherwise, FTP directory list.
base is: ftp's pathFTP connection's path
If path does not end with a 0x2F, append a 0x2F byte to path.
[1230]ftp's 応答のヘッダー受信完了の通知 with ftp's responseFTP connection's response.
[1221] Set ftp's data lengthFTP connection's data length to 0.
[1231]ftp's datastart の通知.
[1263] If ftp's file lengthFTP connection's file length is not null and
ftp's file lengthFTP connection's file length is
ftp's data lengthFTP connection's data length:
[1264] Set data stateFTP connection's data state to exit state.
[1265]ftp's dataend の通知.
[1267]ftp's data transportFTP connection's data transport's
正常終了の送信の指示.
[1268] Set ftp's data transportFTP connection's data transport to null.
[1266] Otherwise:
[1205] Set ftp's data stateFTP connection's data state to data state.
Termination
[1117] To request FTP authentication of ftp, run these steps:
[574] Set ftp's is unauthorizedFTP connection's is unauthorized to true.
[1192] If ftp's data transportFTP connection's data transport is not null:
[1193]ftp's data transportFTP connection's data transport's 中断の指示.
[1274] If ftp's pathFTP connection's path is not null:
[1273]ftp's 完了の通知 with ftp's responseFTP connection's response
and exit.
[1275] Otherwise:
[1089] Reject ftp's established promiseFTP connection's established promise
with exit.
[1250] Timeout
Server-side API
XXX
[1378] To prepare metavariables for an requestrequest,
a transporttransport, and
a string or nullscheme key name, run these steps:
[1391] Let url be request's target urlrequest's target url.
[1409] Set request version to the appropriate value
by request's versionrequest's version:
0.9
HTTP/0.9
1.0
HTTP/1.0
1.1
HTTP/1.1
2.0
HTTP/2.0
[1379] Let vars be a map with following name/value pairs:
CONTENT_LENGTH
request's body lengthrequest's body length,
serializedserialize an integer.
PATH_INFO
url's pathURL path,
UTF-8 encodedUTF-8 encode and percent-decodedpercent-decode
REQUEST_METHOD
request's methodrequest's method
SCRIPT_NAME
The empty string
SERVER_PROTOCOL
request version
[1411] If scheme key name is not null:
[1412] Set vars' scheme key name to http.
[1382] If transport's protocoltransport's protocol is tls:
[1383] Set transport to transport's transporttransport's transport.
[1388] If url's schemeURL scheme is httpshttps::
[1386] Set vars' HTTPS to ON.
[1413] If scheme key name is not null:
[1414] Set vars' scheme key name to https.
[1384] If transport's protocoltransport's protocol is tcp:
[1385] Set vars' REMOTE_ADDR to transport's
remote hosttransport's remote host,
serializedhost serializer.
[1407] Set vars' SERVER_NAME to transport's
local hosttransport's local host,
serializedhost serializer.
[1408] Set vars' SERVER_PORT to transport's
local porttransport's local port, serializedserialize an integer.
[1404] Otherwise:
[1405] Set vars's REMOTE_ADDR to 127.0.0.1.
[1406] Set vars's SERVER_NAME to 127.0.0.1.
[1395] Set vars's SERVER_PORT to 0.
[1392] If url's queryURL query is not null:
[1393] Set vars' QUERY_STRING to url's queryURL query, UTF-8 encodedUTF-8 encode.
[1396] For each header name in vars' header listrequest's header list,
without any duplicate:
[1397] If header name is a string of one or more ASCII alphanumeric and/or
- characters and not ASCII case-insensitivelyASCII case-insensitive
equal to Content-Length:
[1398] Let key be header name, converted to ASCII uppercase.
[1399] Replace any - in header name by _.
[1400] If header name is not CONTENT_TYPE:
[1394] Prepend HTTP_ to header name.
[1401] Let value be the header values in vars's
header listrequest's header list whose name is
ASCII case-insensitivelyASCII case-insensitive equal to header name, in order,
combined.
[1402] Set vars' key to value.
[1410] Let host be vars' HTTP_HOST's value, if any, or null.
[1387] If url's schemeURL scheme is HTTP(S) scheme and
url's hostport, UTF-8 encodedUTF-8 encode, is host:
[1403] Set vars' REQUEST_URI to url, serializedURL serializer and UTF-8 encodedUTF-8 encode.
[1389] Otherwise:
[1390] Set vars' REQUEST_URI to request's
target urlrequest's target url's pathquery and UTF-8 encodedUTF-8 encode.
[1381] Return vars.
[1415]scheme key name is typically wsgi.url_scheme,
psgi.url_scheme, or similar.ASCII alphanumeric, converted to ASCII uppercasecombinedtarget urlrequest's target urlURL serializerpercent-decodeserialize an integerbody lengthrequest's body length
References
[242] This specification depends on the Infra Standard.
The terms
forgiving-base64 encode,
ordered set, emptylist empty, containslist contain,
and
pair
are defined in the Infra Standard.
[1044] The terms
encoding, UTF-8, UTF-8 encode,
decode,
TextDecoder,
encodingTextDecoder's encoding,
error modeTextDecoder's error mode,
ignore BOM flagTextDecoder's ignore BOM flag,
decodeTextDecoder's decode,
TextDecodeOptions, and
stream
are defined in the Encoding Standard.
[621] The terms
C0 controls and space,
serialize an integer,
IPv4 address,
IPv4 serializer,
IPv6 address, domain,
host, host parser, equalshost equivalence,
host serializer,
percent decode,
schemeURL scheme (syntax), network scheme,
URL parser, URL serializer,
URL record,
schemeURL scheme, hostURL's host, portURL's port, and
queryURL query
are defined by URL Standard.
[981] The terms Public Suffixpublic suffix and
ICANN DOMAINSICANN domains is defined by Public Suffix List.
[1341]Status codesstatus code101 and 200 and
URL schemes httphttp: and httpshttps:
are defined by HTTP.
[1330] HTTP headers
`Sec-WebSocket-Accept`,
`Sec-WebSocket-Extensions`,
`Sec-WebSocket-Key`,
`Sec-WebSocket-Protocol`,
`Sec-WebSocket-Version`
URL schemes wsws: and wsswss:, and
the terms
The WebSocket Connection is Established,
Extensions In Use, Subprotocol In UseA WebSocket Message Has Been Received,
The WebSocket Closing Handshake Is Started,
The WebSocket Connection Is Closed,
The WebSocket Connection Close Code,
The WebSocket Connection Close Reason, and
Fail The WebSocket Connection
are defined by RFC 6455.
[354] The terms
bad ports,
appendappend (header list), combinecombine (header list)request,
urlrequest's url,
current urlrequest's current url,
methodrequest method,
header listrequest's header list,
bodyrequest body,
clientrequest's client,
skip-service-worker flag,
synchronous flag,
moderequest mode, credentials mode, cache mode,
redirect mode,
response,
statusstatus code,
status message,
bodyresponse body,
header listresponse's header list,
HTTPS state,
network error,
connection,
obtain a connection,
obtain a WebSocket connection,
basic fetch, HTTP fetch, HTTP-network-or-cache fetch,
HTTP-network fetch,
process response, process response done, and
establish a WebSocket connection
are defined in the Fetch Standard.
[961] The terms
converted to ASCII lowercase and
converted to ASCII uppercase
are defined in the DOM Standard.
[942]SNIServer Name Indication is specified in RFC 6066.
[1007]WPAD is defined by the Internet Draft.
[1008]PAC is defined by https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Necko/Proxy_Auto-Configuration_(PAC)_file
and https://bugzilla.mozilla.org/show_bug.cgi?id=78176.
[1298] The term Strip url for use as a referrer
is defined in the Referrer Policy.
XXX
[65]
reset vs abort
451
acceptSslCerts vs origin
Trailers
Note
[610] This document does not support QUIC at this stage, which is supported by Chrome.
[1010] This document does not support VMS-style path syntax in FTP,
which is supported by Firefox and Chrome.
[1323] This document does not support persistent FTP control connection,
which is supported by Firefox and IE.