diff options
| author | Yash Ladha <yashladhapankajladha123@gmail.com> | 2020-05-09 19:17:52 +0300 |
|---|---|---|
| committer | Ruben Bridgewater <ruben@bridgewater.de> | 2020-05-23 22:36:51 +0300 |
| commit | 9be51ee9a1ea8f9cc578abc1b9e70b220f7488ac (patch) | |
| tree | 87c31b7a65fdb20a7825b9a77e8ce044cb086c26 /src/node_url.cc | |
| parent | 32b641e528210560d9cb4b524acf844f74d0d266 (diff) | |
url: forbid lt and gt in url host code point
As per the recent changes in whatwg/url spec. lt and gt are also added
in the list of forbidden hostCodePoint list.
PR-URL: https://github.com/nodejs/node/pull/33328
Refs: https://github.com/whatwg/url/pull/459
Refs: https://github.com/nodejs/node/issues/33315
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Yongsheng Zhang <zyszys98@gmail.com>
Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de>
Diffstat (limited to 'src/node_url.cc')
| -rw-r--r-- | src/node_url.cc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/node_url.cc b/src/node_url.cc index 27e89e8d9b7..8751588d8bf 100644 --- a/src/node_url.cc +++ b/src/node_url.cc @@ -206,7 +206,8 @@ CHAR_TEST(8, IsForbiddenHostCodePoint, ch == '\0' || ch == '\t' || ch == '\n' || ch == '\r' || ch == ' ' || ch == '#' || ch == '%' || ch == '/' || ch == ':' || ch == '?' || ch == '@' || ch == '[' || - ch == '\\' || ch == ']') + ch == '<' || ch == '>' || ch == '\\' || ch == ']' || + ch == '^') // https://url.spec.whatwg.org/#windows-drive-letter TWO_CHAR_STRING_TEST(8, IsWindowsDriveLetter, |