Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

url: remove \t \n \r in url.parse() similar to WHATWG #45116

Merged
merged 2 commits into from
Oct 24, 2022
Merged

url: remove \t \n \r in url.parse() similar to WHATWG #45116

merged 2 commits into from
Oct 24, 2022

Commits on Oct 22, 2022

  1. url: remove \t \n \r in url.parse() similar to WHATWG 

    WHATWG URL removes tab, new line, and carraige return characters before
processing URL strings. To narrow the differences between WHATWG URL and
url.parse(), and thus reduce opportunities for host spoofing etc. due to
differences between the two APIs, let's do the same with url.parse().
    @Trott
    Trott committed Oct 22, 2022
    Configuration menu
    Copy the full SHA
    14b9c7b View commit details
    Browse the repository at this point in the history

  2. fixup! url: remove \t \n \r in url.parse() similar to WHATWG

    @Trott
    Trott committed Oct 22, 2022
    Configuration menu
    Copy the full SHA
    607d348 View commit details
    Browse the repository at this point in the history