Releases: pillarjs/encodeurl
Releases · pillarjs/encodeurl
v2.0.0
Changed
Important: If you are using this to encode user entered and validated URLs, upgrade to v2 immediately. It is possible to exploit \
encoding in v1. A URL can be formed that looks like http://foo.com\@bar.com
, which parses as foo.com
for the host, but when encodeUrl(url)
will parse as bar.com
for the host.
1.0.2
- Fix encoding
%
as last character
1.0.1
- Fix encoding unpaired surrogates at start/end of string
1.0.0
- Initial release