From d1232947c636babe83c56e2189a5cb763700855d Mon Sep 17 00:00:00 2001
From: Markus Unterwaditzer <markus@unterwaditzer.net>
Date: Mon, 5 Dec 2016 14:19:32 +0100
Subject: [PATCH] Add comment for question #527

---
 vdirsyncer/utils/__init__.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/vdirsyncer/utils/__init__.py b/vdirsyncer/utils/__init__.py
index e1a0acb..4aa983f 100644
--- a/vdirsyncer/utils/__init__.py
+++ b/vdirsyncer/utils/__init__.py
@@ -10,6 +10,10 @@ from inspect import getfullargspec
 from .. import exceptions
 
 
+# This is only a subset of the chars allowed per the spec. In particular `@` is
+# not included, because there are some servers that (incorrectly) encode it to
+# `%40` when it's part of a URL path, and reject or "repair" URLs that contain
+# `@` in the path. So it's better to just avoid it.
 SAFE_UID_CHARS = ('abcdefghijklmnopqrstuvwxyz'
                   'ABCDEFGHIJKLMNOPQRSTUVWXYZ'
                   '0123456789_.-+')