Files
node/lib
Jonathan Johnson c90eac7e0e url: change hostname regex to negate invalid chars
Regarding joyent/node#8520

This changes hostname validation from a whitelist regex approach
to a blacklist regex approach as described in https://url.spec.whatwg.org/#host-parsing.

url.parse misinterpreted `https://good.com+.evil.org/`
as `https://good.com/+.evil.org/`.  If we use url.parse to check the
validity of the hostname, the test passes, but in the browser the
user is redirected to the evil.org website.
2014-12-09 17:57:10 +01:00
..
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-12-07 01:45:16 +03:00
2014-11-22 17:23:30 +01:00
2014-12-09 17:57:09 +01:00
2014-11-28 13:21:43 +03:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00
2014-11-22 17:23:30 +01:00