[url] Strip whitespace in the scheme too (#101)

See https://github.com/whatwg/html/issues/823 for context.

@valenting does this basically mean stripping \r\n\t from the input to the URL parser? Seems like it would be the easiest if we go down this route. Still not entirely happy as it makes it easier to sneak unsafe URL schemes past broken URL checks, but if you're not using safelists it's unsafe anyway I suppose.

---
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/url/issues/101

Received on Monday, 7 March 2016 15:19:06 UTC