Path: csiph.com!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!news.teledata-fn.de!newsfeed.arcor.de!newsspool3.arcor-online.net!news.arcor.de.POSTED!not-for-mail
Content-Type: text/plain; charset="UTF-8"
Message-ID: <4919648.gLsDIqzOUs@PointedEars.de>
From: Thomas 'PointedEars' Lahn <PointedEars@web.de>
Reply-To: Thomas 'PointedEars' Lahn <cljs@PointedEars.de>
Organization: PointedEars Software (PES)
Date: Sat, 25 Aug 2012 12:02:36 +0200
User-Agent: KNode/4.4.11
Content-Transfer-Encoding: 8Bit
X-Face: %i>XG-yXR'\"2P/C_aO%~;2o~?g0pPKmbOw^=NT`tprDEf++D.m7"}HW6.#=U:?2GGctkL,f89@H46O$ASoW&?s}.k+&.<b';Md8`dH6iqhT)6C^.Px|[=M@7=Ik[_w<%n1Up"LPQNu2m8|L!/3iby{-]A+#YE}Kl{Cw$\U!kD%K}\2jz"QQP6Uqr],./"?;=4v
Face: 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
Subject: Re: XMLHttpRequest: POST with Data
Newsgroups: comp.lang.javascript
References: <429d38h112ptste9sp22ks8sqk9cgumo7r@4ax.com> <k16d9n$tqa$1@speranza.aioe.org>
Followup-To: comp.lang.javascript
MIME-Version: 1.0
Lines: 37
NNTP-Posting-Date: 25 Aug 2012 12:02:38 CEST
NNTP-Posting-Host: d59c315c.newsspool2.arcor-online.net
X-Trace: DXC=GSRDB6MaLgP1`E>oC;JXEZA9EHlD;3YcR4Fo<]lROoRQ8kF<OcfhCO[E[fcFYNkLVXDZm8W4\YJN\T<8F<]0D<`Y503L2KRB?SS>]j<L?]FUnT
X-Complaints-To: usenet-abuse@arcor.de
Xref: csiph.com comp.lang.javascript:15553

Christoph Becker wrote:

> Gene Wirchenko wrote:
>>      I have found that using the GET style of
>>           oRequest.open("POST",Url+"?"+DataToSend,true);
>>           oRequest.send();
>> does work.  At least, it appears to.
>> 
>> […]
>>   2) What should I do for escaping of data?  Going to the server, any
>> line breaks get eaten somewhere so I use escape() at browser and
>> unescape() at server.  Going from server to browser, line break are
>> not eaten.  Does this mean that I do not have to escape()/unescape()
>> on the trip back?
>> 
>>      Are escape() and unescape() the correct functions to use?
> 
> For POST requests escaping on the client side should not be necessary.

Incorrect.  The payload of the POST request (the message body) needs to be 
URI-percent-encoded, see RFC 2616.

> For GET requests encodeURI() resp. encodeURIComponent seem to be more
> appropriate.

encodeURIComponent() is the function to be used for percent-encoding of each 
parameter name and value regardless of the request method.  The proprietary 
escape() and unescape() functions should not be used as they are not 
Unicode-safe.


PointedEars
-- 
> If you get a bunch of authors […] that state the same "best practices"
> in any programming language, then you can bet who is wrong or right...
Not with javascript. Nonsense propagates like wildfire in this field.
  -- Richard Cornford, comp.lang.javascript, 2011-11-14