Buggy parsing of srcset attribute

[anishathalye]

The implementation currently splits the srcset on "," (comma), but this is not quite correct.

This results in incorrect handling of URLs with commas in the srcset. For example, base64-encoded images will be incorrectly handled, because it'll split on the comma in e.g., data:image/png;base64,iKB...=, and then the later check will say that the base64-encoded data iKB...= on its own is not a valid URL (that second part won't be caught by base64? because the first part has been split off).

It'll also fail with regular old URLs that contain commas.

This page describes how the srcset should be parsed.

[gjtorikian]

Thanks forthe report, a new patch release will go out to address this.