Skip to content

fix: validate URI scheme grammar - #208

Open
mcollina wants to merge 1 commit into
mainfrom
fix/validate-uri-scheme
Open

fix: validate URI scheme grammar#208
mcollina wants to merge 1 commit into
mainfrom
fix/validate-uri-scheme

Conversation

@mcollina

Copy link
Copy Markdown
Member

Summary

  • validate parsed schemes against the ASCII grammar from RFC 3986 §3.1
  • stop percent-decoding scheme text
  • preserve malformed scheme input during normalization, reject it during equality checks, and throw during resolution
  • add coverage for percent-encoded, invalid-leading-character, invalid-character, and Unicode case-folding forms

This addresses the behavior reported in GHSA-9pcr-hcx9-jj65 as an RFC compliance bug. No supported security-sensitive execution or navigation flow is involved.

Tests

  • npm test
  • npm run lint
  • npm run test:typescript

@Tony133

Tony133 commented Aug 15, 2026

Copy link
Copy Markdown
Member

There are conflicts on the index.js file

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants