Re: [whatwg/url] Malformed URL Normalization in Standard Introduces SSRF Risks (Issue #893)

the-moisrex left a comment (whatwg/url#893)

Utilities like URL, are designed to convert strings into parsed valid URLs.

**Validation** of the original string is not the goal of the specs, conversion is AFIK.

You can validate by simply doing something like this: `new URL(string).href == string`.

Though I accept that we should have a validation-only solution that wouldn't require to actually do the conversion so the performance would be better.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/url/issues/893#issuecomment-3707672294
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/url/issues/893/3707672294@github.com>