URI normalization

The following normalizations are described in RFC 3986 [1] to result in equivalent URIs:

• Converting percent-encoded triplets to uppercase. The hexadecimal digits within a percent-encoding triplet of the URI (e.g., %3a versus %3A) are case-insensitive and therefore should be normalized to use uppercase letters for the digits A-F.[2] Example:

http://example.com/foo%2a → http://example.com/foo%2A

• Converting the scheme and host to lowercase. The scheme and host components of the URI are case-insensitive and therefore should be normalized to lowercase.[3] Example:

HTTP://User@Example.COM/Foo → http://User@example.com/Foo

• Decoding percent-encoded triplets of unreserved characters. Percent-encoded triplets of the URI in the ranges of ALPHA (%41–%5A and %61–%7A), DIGIT (%30–%39), hyphen (%2D), period (%2E), underscore (%5F), or tilde (%7E) do not require percent-encoding and should be decoded to their corresponding unreserved characters.[4] Example:

http://example.com/%7Efoo → http://example.com/~foo

• Removing dot-segments. Dot-segments . and .. in the path component of the URI should be removed by applying the remove_dot_segments algorithm[5] to the path described in RFC 3986.[6] Example:

http://example.com/foo/./bar/baz/../qux → http://example.com/foo/bar/qux

• Converting an empty path to a "/" path. In presence of an authority component, an empty path component should be normalized to a path component of "/".[7] Example:

http://example.com → http://example.com/

• Removing the default port. An empty or default port component of the URI (port 80 for the http scheme) with its ":" delimiter should be removed.[8] Example:

http://example.com:80/ → http://example.com/

For http and https URIs, the following normalizations listed in RFC 3986 may result in equivalent URIs, but are not guaranteed to by the standards:

• Adding a trailing "/" to a non-empty path. Directories (folders) are indicated with a trailing slash and should be included in URIs. Example:

http://example.com/foo → http://example.com/foo/

However, there is no way to know if a URI path component represents a directory or not. RFC 3986 notes that if the former URI redirects to the latter URI, then that is an indication that they are equivalent.

Applying the following normalizations result in a semantically different URI although it may refer to the same resource:

• Removing directory index. Default directory indexes are generally not needed in URIs. Examples:

http://example.com/a/index.html → http://example.com/a/

http://example.com/default.asp → http://example.com/

• Removing the fragment. The fragment component of a URI is never seen by the server and can sometimes be removed. Example:

http://example.com/bar.html#section1 → http://example.com/bar.html

However, AJAX applications frequently use the value in the fragment.

• Replacing IP with domain name. Check if the IP address maps to a domain name. Example:

http://208.77.188.166/ → http://example.com/

The reverse replacement is rarely safe due to virtual web servers.

• Limiting protocols. Limiting different application layer protocols. For example, the “https” scheme could be replaced with “http”. Example:

https://example.com/ → http://example.com/

• Removing duplicate slashes Paths which include two adjacent slashes could be converted to one. Example:

http://example.com/foo//bar.html → http://example.com/foo/bar.html

• Removing or adding “www” as the first domain label. Some websites operate identically in two Internet domains: one whose least significant label is “www” and another whose name is the result of omitting the least significant label from the name of the first, the latter being known as a naked domain. For example, http://www.example.com/ and http://example.com/ may access the same website. Many websites redirect the user from the www to the non-www address or vice versa. A normalizer may determine if one of these URIs redirects to the other and normalize all URIs appropriately. Example:

http://www.example.com/ → http://example.com/

• Sorting the query parameters. Some web pages use more than one query parameter in the URI. A normalizer can sort the parameters into alphabetical order (with their values), and reassemble the URI. Example:

http://example.com/display?lang=en&article=fred → http://example.com/display?article=fred&lang=en

However, the order of parameters in a URI may be significant (this is not defined by the standard) and a web server may allow the same variable to appear multiple times.[9]

• Removing unused query variables. A page may only expect certain parameters to appear in the query; unused parameters can be removed. Example:

http://example.com/display?id=123&fakefoo=fakebar → http://example.com/display?id=123

Note that a parameter without a value is not necessarily an unused parameter.

• Removing default query parameters. A default value in the query string may render identically whether it is there or not. Example:

http://example.com/display?id=&sort=ascending → http://example.com/display

• Removing the "?" when the query is empty. When the query is empty, there may be no need for the "?". Example:

http://example.com/display? → http://example.com/display