Skip to content

Releases: pillarjs/encodeurl

v2.0.0

29 Mar 00:04
5f2205e
Compare
Choose a tag to compare

Changed

  • Align encoding with WHATWG URL spec (#8) be0f77b
    • Stops encoding \, ^, and |.

Important: If you are using this to encode user entered and validated URLs, upgrade to v2 immediately. It is possible to exploit \ encoding in v1. A URL can be formed that looks like http://foo.com\@bar.com, which parses as foo.com for the host, but when encodeUrl(url) will parse as bar.com for the host.

v1.0.2...v2.0.0

1.0.2

22 Jan 03:12
Compare
Choose a tag to compare
  • Fix encoding % as last character

1.0.1

10 Jun 00:52
Compare
Choose a tag to compare
  • Fix encoding unpaired surrogates at start/end of string

1.0.0

10 Jun 00:52
Compare
Choose a tag to compare
  • Initial release