frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

You can use newline characters in URLs

https://lemire.me/blog/2026/02/28/you-can-use-newline-characters-in-urls/
35•chmaynard•3d ago

Comments

TZubiri•1h ago
Cool thanks I 100% will not, if only because newlines are header separators in HTTP.
renewiltord•1h ago
I don't even put space characters in my filenames. May MyDocu~1 live on forever.
bmandale•1h ago
>Remove all ASCII tab or newline from input.

the title is referring to inside html attributes, where they will be removed hence not affect where the link points.

joshuahaglund•1h ago
Yeah "You can use newline or tab characters in the HREF attribute and the browser will throw a validation error, remove the offending character, try again, then succeed" would be a more accurate title.
pants2•1h ago
You can put pickle juice in your cereal too
dylan604•1h ago
I was thinking similar. Just another example of just because you can doesn't mean you should.
nine_k•51m ago
When you write a regexp to detect liquids in your cereal, you have to account for the pickles, that is, newlines an tabs.
bubblewand•50m ago
Vertical tabs in file names is where it’s at.
behnamoh•50m ago
title is misleading. I agree with @bmandale's comment.
est•45m ago
on a side note you can use many surprising non-standard HTTP verbs, but many CDNs like Cloudflare filter them
layman51•43m ago
After I read this, I started to look at the Wikipedia article on Base64 and eventually got to the article for the data URI scheme. That's where I found a sentence that seems to a little bit at odds with the blogpost. The Wikipedia article mentions that "whitespace characters are not permitted in data URIs".

But then I suppose it goes back to the main thrust of the blogpost because it says that in the context of HTML 4 and 5, that linefeeds within an attribute value are ignored. So possibly there are some other contexts where whitespace might not be ignored.

TZubiri•23m ago
They are not, but you can encode them, if you encode whitespace characters, you included whitespace in a URL.

One of the requirement of URLs is that it needs to be transmissible over paper or aural media, so arbitrary octets and the unused portion of ASCII are not legal either.

yndoendo•6m ago
Don't forget about pigeon packets. https://www.rfc-editor.org/rfc/rfc2549
vivzkestrel•38m ago
- https://lemire.me/blog/ I am not able to see a quick list of all the posts on your blog, I tried all the pages

- https://lemire.me/posts

- https://lemire.me/archive

- https://lemire.me/archives

- Everyone of them gives me a 404, can you kindly add some page on your blog form where I can just see the titles of all the articles quickly?

- Most blogs posted on HN are not user friendly in this regard, sometimes the reader wants a quick glimpse of everything on 1 page so that they can quickly pick interesting stuff

etothet•32m ago
“Hey you got new lines in my URLs!”

“You got URLs in my new lines!”

sheept•24m ago
Somewhat relatedly, GitHub Pages does support using URL-encoded newline characters %0A to reference file names with newlines,[0] but GitHub itself will omit the file from the web UI's tree view.

[0]: https://sheeptester.github.io/hello-world/test/%20%0A%20%0A/...

jprjr_•24m ago
I stopped reading Daniel Lemire a while back.

He had a blog post that seemed just weird and out of left field. Like it was clearly a response to something but what? What was the motivation for it?

When asked he said y'know. He just thinks about stuff and writes and that's what he does.

Turns out the blog post was a post he also made on social media. And said post was a response to something. And I guess he thought it was pretty good writing and should go on his blog, too.

Nothing wrong with that on it's own but I feel like most people would preface a post like that with "I saw this thing." And when directly asked like... He just straight up lied?

That whole thing just rubbed me the wrong way.

For full context https://lemire.me/blog/2025/10/17/research-results-are-cultu...

In the comments I turned into kind of a dick. I was pretty upset about being lied to.

Anyways between that and articles like this that are honestly useless and kinda misleading - I'm not really the biggest fan.

Motorola GrapheneOS devices will be bootloader unlockable/relockable

https://grapheneos.social/@GrapheneOS/116160393783585567
168•pabs3•2h ago•37 comments

Graphics Programming Resources

https://develop--gpvm-website.netlify.app/resources/
20•abetusk•1h ago•2 comments

MacBook Pro with M5 Pro and M5 Max

https://www.apple.com/newsroom/2026/03/apple-introduces-macbook-pro-with-all-new-m5-pro-and-m5-max/
705•scrlk•13h ago•701 comments

The largest acidic geyser has been putting on quite a show

https://www.usgs.gov/observatories/yvo/news/echinus-geyser-back-action-now
25•1659447091•2h ago•1 comments

Weave – A language aware merge algorithm based on entities

https://github.com/Ataraxy-Labs/weave
26•rs545837•2h ago•9 comments

TikTok will not introduce end-to-end encryption, saying it makes users less safe

https://www.bbc.com/news/articles/cly2m5e5ke4o
19•1659447091•2h ago•6 comments

Mac external displays for designers and developers, part 2

https://bjango.com/articles/macexternaldisplays2/
14•fragmede•1h ago•5 comments

Claude's Cycles [pdf]

https://www-cs-faculty.stanford.edu/~knuth/papers/claude-cycles.pdf
523•fs123•16h ago•225 comments

Voxile: A ray-traced game made in its own engine and programming language

https://elbowgreasegames.substack.com/p/voxray-games-pushes-major-update
130•spacemarine1•6h ago•31 comments

Mount Mayhem at Netflix: Scaling Containers on Modern CPUs

https://netflixtechblog.com/mount-mayhem-at-netflix-scaling-containers-on-modern-cpus-f3b09b68beac
11•vquemener•2d ago•5 comments

You can use newline characters in URLs

https://lemire.me/blog/2026/02/28/you-can-use-newline-characters-in-urls/
35•chmaynard•3d ago•18 comments

California's Digital Age Assurance Act, and FOSS

https://runxiyu.org/comp/ab1043/
3•todsacerdoti•19m ago•0 comments

Textadept

https://orbitalquark.github.io/textadept/
88•giancarlostoro•2d ago•19 comments

Speculative Speculative Decoding (SSD)

https://arxiv.org/abs/2603.03251
3•E-Reverance•31m ago•0 comments

GPT‑5.3 Instant

https://openai.com/index/gpt-5-3-instant/
310•meetpateltech•9h ago•236 comments

Intel's make-or-break 18A process node debuts for data center with 288-core Xeon

https://www.tomshardware.com/pc-components/cpus/intels-make-or-break-18a-process-node-debuts-for-...
257•vanburen•9h ago•212 comments

An Interactive Intro to CRDTs (2023)

https://jakelazaroff.com/words/an-interactive-intro-to-crdts/
104•evakhoury•8h ago•21 comments

When AI writes the software, who verifies it?

https://leodemoura.github.io/blog/2026/02/28/when-ai-writes-the-worlds-software.html
170•todsacerdoti•11h ago•154 comments

The Xkcd thing, now interactive

https://editor.p5js.org/isohedral/full/vJa5RiZWs
1192•memalign•16h ago•152 comments

Vibe coding for PMs

https://www.ddmckinnon.com/2026/02/11/my-%f0%9f%8c%b6-take-on-vibe-coding-for-pms/
31•dmckinno•4h ago•22 comments

Launch HN: Cekura (YC F24) – Testing and monitoring for voice and chat AI agents

74•atarus•13h ago•19 comments

We've freed Cookie's Bustle from copyright hell

https://gamehistory.org/cookies-bustle/
103•sb057•7h ago•14 comments

Lenovo’s new ThinkPads score 10/10 for repairability

https://www.ifixit.com/News/115827/new-thinkpads-score-perfect-10-repairability
292•wrxd•4h ago•133 comments

Don't become an engineering manager

https://newsletter.manager.dev/p/dont-become-an-engineering-manager
321•flail•13h ago•235 comments

130k Lines of Formal Topology: Simple and Cheap Autoformalization for Everyone?

https://arxiv.org/abs/2601.03298
16•PaulHoule•4h ago•6 comments

TorchLean: Formalizing Neural Networks in Lean

https://leandojo.org/torchlean.html
78•matt_d•3d ago•10 comments

Physics Girl: Super-Kamiokande – Imaging the sun by detecting neutrinos [video]

https://www.youtube.com/watch?v=B3m3AMRlYfc
441•pcdavid•13h ago•70 comments

Time, Space, and Life as We Know It (2017)

https://raganwald.com/2017/01/12/time-space-life-as-we-know-it.html
12•vismit2000•3d ago•0 comments

What’s in a name? (2014)

https://sailsandcommas.com/2014/02/03/whats-in-a-name/
12•Curiositry•2d ago•5 comments

CIA working to arm Kurdish forces to spark uprising in Iran, sources say

https://www.cnn.com/2026/03/03/politics/cia-arming-kurds-iran
15•vinnyglennon•49m ago•2 comments