Jonathan Johnson 6120472036 url: change hostname regex to negate invalid chars ...

Regarding joyent/node#8520

This changes hostname validation from a whitelist regex approach
to a blacklist regex approach as described in https://url.spec.whatwg.org/#host-parsing.

url.parse misinterpreted `https://good.com+.evil.org/`
as `https://good.com/+.evil.org/`.  If we use url.parse to check the
validity of the hostname, the test passes, but in the browser the
user is redirected to the evil.org website.

2014-12-02 17:24:18 -08:00

..

_debugger.js

deps: re-implement debugger-agent

2014-10-08 15:44:40 +04:00

_http_agent.js

lib: improved forEach object performance

2014-09-05 09:19:32 -07:00

_http_client.js

lib: http: poison parser references after freeing

2014-09-05 09:34:37 -07:00

_http_common.js

lib: http: poison parser references after freeing

2014-09-05 09:34:37 -07:00

_http_incoming.js

http: Improve _addHeaderLines method

2014-09-30 17:00:29 -07:00

_http_outgoing.js

http: cleanup setHeader()

2014-09-29 12:32:42 -07:00

_http_server.js

lib: http: poison parser references after freeing

2014-09-05 09:34:37 -07:00

_linklist.js

Update copyright headers

2011-03-14 17:37:05 -07:00

_stream_duplex.js

lib: improved forEach object performance

2014-09-05 09:19:32 -07:00

_stream_passthrough.js

stream: _write takes an encoding argument

2013-03-05 14:27:15 -08:00

_stream_readable.js

net,stream: add isPaused, don't read() when paused

2014-08-20 13:58:12 -07:00

_stream_transform.js

lib: remove unused variables

2014-06-11 20:41:12 -07:00

_stream_writable.js

streams: make setDefaultEncoding() throw

2014-10-09 16:48:59 -07:00

_tls_common.js

tls: support multiple keys/certs

2014-09-03 17:36:54 +04:00

_tls_legacy.js

net: add remoteFamily for socket

2014-07-23 23:44:57 +04:00

_tls_wrap.js

tls: checkServerIdentity option

2014-09-09 17:15:50 +01:00

assert.js

Merge remote-tracking branch 'origin/v0.10' into master

2014-07-29 12:51:27 +04:00

buffer.js

buffer, doc: misc. fix and cleanup

2014-10-08 02:24:32 -07:00

child_process.js

child_process: improve spawn() argument handling

2014-09-25 15:13:14 -07:00

cluster.js

cluster: do not signal children in debug mode

2014-10-08 15:44:40 +04:00

console.js

lib: improved forEach object performance

2014-09-05 09:19:32 -07:00

constants.js

Update copyright headers

2011-03-14 17:37:05 -07:00

crypto.js

crypto: createDiffieHellman throw for bad args

2014-10-08 15:38:46 -07:00

dgram.js

net,dgram: workers can listen on exclusive ports

2014-09-03 15:16:16 -07:00

dns.js

dns: include host name in error message if available

2014-09-16 15:32:04 +04:00

domain.js

lib: remove unused variables

2014-06-11 20:41:12 -07:00

events.js

events: Output the event that is leaking

2014-07-01 15:45:55 +04:00

freelist.js

lib, src: don't make http parser handles weak

2014-09-05 09:34:15 -07:00

fs.js

Merge remote-tracking branch 'upstream/v0.10' into v0.12

2014-08-07 16:33:35 -07:00

http.js

http: do not send 0\r\n\r\n in TE HEAD responses

2014-09-16 15:24:19 -07:00

https.js

http, https: don't depend on globalAgent

2014-02-26 13:18:54 -08:00

module.js

module: correct the order of the assertions

2014-11-13 19:58:52 -08:00

net.js

net: add pauseOnConnect option to createServer()

2014-10-27 14:11:20 -07:00

os.js

lint

2013-03-28 13:19:08 -07:00

path.js

path: refactor normalizeArray()

2014-11-26 12:16:56 -08:00

punycode.js

lib: remove unused variables and functions

2013-08-15 17:19:17 -07:00

querystring.js

Merge remote-tracking branch 'upstream/v0.10' into v0.12

2014-09-16 17:48:09 -07:00

readline.js

readline: should not require an output stream.

2014-10-01 15:00:02 -07:00

repl.js

repl: proper setPrompt() and multiline support

2014-07-31 12:30:46 +04:00

smalloc.js

smalloc: don't allow to dispose typed arrays

2014-11-26 12:39:02 -08:00

stream.js

src: Replace macros with util functions

2013-08-01 15:08:01 -07:00

string_decoder.js

lib: jslint string_decoder.js

2014-07-15 12:43:59 +04:00

sys.js

Fix #3577 Un-break require('sys')

2012-06-28 10:14:03 -07:00

timers.js

timers: backport f8193ab

2014-07-31 08:53:24 -07:00

tls.js

tls: remove tls.createSecurePair code deprecation

2014-11-09 21:39:24 -08:00

tracing.js

lib: remove unused variables

2014-06-11 20:41:12 -07:00

tty.js

lib: remove unused variables and functions

2013-08-15 17:19:17 -07:00

url.js

url: change hostname regex to negate invalid chars

2014-12-02 17:24:18 -08:00

util.js

util: add es6 Symbol support for util.inspect

2014-10-03 10:12:00 -07:00

vm.js

lib, src: add vm.runInDebugContext()

2014-09-16 12:28:47 -07:00

zlib.js

lib: improved forEach object performance

2014-09-05 09:19:32 -07:00