Javascript URL mutation library
URI.parse()
handle excessive slashes in scheme-relative URLs - disclosed by zeyu2001 via https://huntr.dev/
URI.parse()
remove \r
(CR), \n
, (LF) \t
(TAB) - disclosed by haxatron via https://huntr.dev/
URI.parse()
handle excessive colons in protocol delimiter - disclosed by huydoppa via https://huntr.dev/
URI.parse()
handle leading whitespace - disclosed by p0cas via https://huntr.dev/
URI.parse()
treat scheme case-insenstivie when handling excessive slackes and backslashes - PR #412 by r0hanSH
URI.parseQuery()
to prevent overwriting __proto__
in parseQuery() - disclosed privately by @NewEraCrackerURI.parse()
to handle variable amounts of \
and /
in scheme delimiter as Node and Browsers do - disclosed privately by ready-research via https://huntr.dev/
URI.parse()
to rewrite \
in scheme delimiter to /
as Node and Browsers do - disclosed privately by Yaniv Nizry from the CxSCA AppSec team at CheckmarxURI.parseAuthority()
to rewrite \
to /
as Node and Browsers do - followed up to by alesandroortiz in PR #403, relates to Issue #233
URI.parseAuthority()
to rewrite \
to /
as Node and Browsers do - disclosed privately by alesandroortiz, relates to Issue #233
URI.build()
to properly handle relative paths when a scheme is given - Issue #387
URI.buildQuery()
to properly handle empty param name - Issue #243, PR #383