5.1 Security Considerations for Implementers

Security considerations are discussed in [RFC2616] section 15. Since the query component and the Host header are often used for comparison against expected strings, and since the extensions in this document allow additional ways to encode the same strings, take care to ensure that matching algorithms operate correctly, typically by normalizing a string to some common form before comparison. For further discussion of security considerations for comparison algorithms, see [RFC6943].