fix(parse): case insensitive scheme - #412

medialize · Feb 15, 2022 · 6ea641c · 6ea641c
1 parent 19e54c7
commit 6ea641c
Show file tree

Hide file tree

Showing 3 changed files with 51 additions and 2 deletions.
diff --git a/src/URI.js b/src/URI.js
@@ -513,7 +513,7 @@
     }
 
     // slashes and backslashes have lost all meaning for the web protocols (https, http, wss, ws)
-    string = string.replace(/^(https?|ftp|wss?)?:[/\\]*/, '$1://');
+    string = string.replace(/^(https?|ftp|wss?)?:[/\\]*/i, '$1://');
 
     // extract protocol
     if (string.substring(0, 2) === '//') {

diff --git a/src/URI.min.js b/src/URI.min.js
diff --git a/test/urls.js b/test/urls.js
@@ -2327,6 +2327,55 @@ var urls = [{
         idn: false,
         punycode: false
       }
+    }, {
+      name: 'excessive slash protocol https case-insensitive',
+      url: 'hTTps://////attacker.com',
+      _url: 'hTTps://attacker.com/',
+      parts: {
+        protocol: 'hTTps',
+        username: null,
+        password: null,
+        hostname: 'attacker.com',
+        port: null,
+        path: '/',
+        query: null,
+        fragment: null
+      },
+      accessors: {
+        protocol: 'hTTps',
+        username: '',
+        password: '',
+        port: '',
+        path: '/',
+        query: '',
+        fragment: '',
+        resource: '/',
+        authority: 'attacker.com',
+        origin: 'hTTps://attacker.com',
+        userinfo: '',
+        subdomain: '',
+        domain: 'attacker.com',
+        tld: 'com',
+        directory: '/',
+        filename: '',
+        suffix: '',
+        hash: '',
+        search: '',
+        host: 'attacker.com',
+        hostname: 'attacker.com'
+      },
+      is: {
+        urn: false,
+        url: true,
+        relative: false,
+        name: true,
+        sld: false,
+        ip: false,
+        ip4: false,
+        ip6: false,
+        idn: false,
+        punycode: false
+      }
     }, {
       name: 'no slash protocol ftp',
       url: 'ftp:attacker.com',