Skip to content

url: trim leading and trailing C0 control chars - #42196

Merged
nodejs-github-bot merged 1 commit into
nodejs:masterfrom
Trott:url-parse-backspace
Mar 8, 2022
Merged

nodejs-github-bot merged 1 commit into
nodejs:masterfrom
Trott:url-parse-backspace

Conversation

@Trott

@Trott Trott commented Mar 3, 2022

Copy link
Copy Markdown
Member

Emulate the WHATWHG URL parse behavior of trimming leading and trailing
C0 control characters. This moves url.parse() slightly closer to
WHATWHG URL behavior. The current behavior is possibly insecure for some
uses. (The url.parse() API is marked as Legacy and the documentation
specifically says it has known bugs and insecure behaviors. Still this
change makes a lot of sense.)

This issue was reported by P0cas. https://github.com/P0cas

Loading
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs-ci PRs that need a full CI run. url Issues and PRs related to the legacy built-in url module.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants