logoalt Hacker News

You can use newline characters in URLs

53 pointsby chmaynardlast Saturday at 11:24 PM25 commentsview on HN

Comments

bmandaletoday at 2:37 AM

>Remove all ASCII tab or newline from input.

the title is referring to inside html attributes, where they will be removed hence not affect where the link points.

show 2 replies
pants2today at 2:39 AM

You can put pickle juice in your cereal too

show 2 replies
layman51today at 3:13 AM

After I read this, I started to look at the Wikipedia article on Base64 and eventually got to the article for the data URI scheme. That's where I found a sentence that seems to a little bit at odds with the blogpost. The Wikipedia article mentions that "whitespace characters are not permitted in data URIs".

But then I suppose it goes back to the main thrust of the blogpost because it says that in the context of HTML 4 and 5, that linefeeds within an attribute value are ignored. So possibly there are some other contexts where whitespace might not be ignored.

show 1 reply
sheepttoday at 3:31 AM

Somewhat relatedly, GitHub Pages does support using URL-encoded newline characters %0A to reference file names with newlines,[0] but GitHub itself will omit the file from the web UI's tree view.

[0]: https://sheeptester.github.io/hello-world/test/%20%0A%20%0A/...

blacktarmactoday at 6:46 AM

Wild! I like it thanks for the writeup!

renewiltordtoday at 2:34 AM

I don't even put space characters in my filenames. May MyDocu~1 live on forever.

show 1 reply
behnamohtoday at 3:05 AM

title is misleading. I agree with @bmandale's comment.

esttoday at 3:10 AM

on a side note you can use many surprising non-standard HTTP verbs, but many CDNs like Cloudflare filter them

jprjr_today at 3:31 AM

I stopped reading Daniel Lemire a while back.

He had a blog post that seemed just weird and out of left field. Like it was clearly a response to something but what? What was the motivation for it?

When asked he said y'know. He just thinks about stuff and writes and that's what he does.

Turns out the blog post was a post he also made on social media. And said post was a response to something. And I guess he thought it was pretty good writing and should go on his blog, too.

Nothing wrong with that on it's own but I feel like most people would preface a post like that with "I saw this thing." And when directly asked like... He just straight up lied?

That whole thing just rubbed me the wrong way.

For full context https://lemire.me/blog/2025/10/17/research-results-are-cultu...

In the comments I turned into kind of a dick. I was pretty upset about being lied to.

Anyways between that and articles like this that are honestly useless and kinda misleading - I'm not really the biggest fan.

show 1 reply
etothettoday at 3:23 AM

“Hey you got new lines in my URLs!”

“You got URLs in my new lines!”

bubblewandtoday at 3:05 AM

Vertical tabs in file names is where it’s at.

TZubiritoday at 2:31 AM

Cool thanks I 100% will not, if only because newlines are header separators in HTTP.

show 1 reply
vivzkestreltoday at 3:17 AM

- https://lemire.me/blog/ I am not able to see a quick list of all the posts on your blog, I tried all the pages

- https://lemire.me/posts

- https://lemire.me/archive

- https://lemire.me/archives

- Everyone of them gives me a 404, can you kindly add some page on your blog form where I can just see the titles of all the articles quickly?

- Most blogs posted on HN are not user friendly in this regard, sometimes the reader wants a quick glimpse of everything on 1 page so that they can quickly pick interesting stuff