Search results

Security: Hostname bypass via Unicode confusable characters (SSRF/allowlist bypass)

Status: Open.

#241 In unshiftio/url-parse;

· 0xBassia opened on Apr 8, 2026

Why isn't the package deprecated?

Status: Open.

#240 In unshiftio/url-parse;

· 43081j opened on Apr 8, 2026

CodeQL raises js/remote-property-injection finding

Status: Open.

#239 In unshiftio/url-parse;

· MiikaKarkkainen opened on Nov 24, 2025

Is colon required when specifying the protocol

Status: Open.

#221 In unshiftio/url-parse;

· humphreyn opened on Jan 4, 2022

unexpected encode behaviour for set query

Status: Open.

#220 In unshiftio/url-parse;

· herbertpimentel opened on Dec 23, 2021

url.set() doesn't work as expected with property 'origin'

Status: Open.

#182 In unshiftio/url-parse;

· egold opened on Sep 13, 2019

extractProtocol method takes too much time

Status: Open.

#179 In unshiftio/url-parse;

· adityapatadia opened on Jun 11, 2019

ES Modules

Status: Open.

#168 In unshiftio/url-parse;

· lastmjs opened on Mar 1, 2019

searchParams is not available (though query is)

Status: Open.

#162 In unshiftio/url-parse;

· prabashn opened on Nov 7, 2018

Indirect dependency on Node environment

Status: Open.

#150 In unshiftio/url-parse;

· kamsar opened on Jun 29, 2018

Option to keep default port

Status: Open.

#132 In unshiftio/url-parse;

· lutovich opened on Apr 27, 2018

Resolve relative urls using HTML <base>

Status: Open.

#114 In unshiftio/url-parse;

· OmgImAlexis opened on Mar 10, 2018