You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Normalize address-bar schemes and host:port inputs before URL validation #546
The address normalizer preserves any input matching the scheme regex, but its allow check accepts only lowercase http:// and https://. Uppercase-scheme URLs such as HTTPS://example.org are silently rejected, and common non-loopback host:port values such as example.org:8080 are mistaken for a scheme and discarded. Canonicalize allowed scheme casing and distinguish a host/port from an arbitrary URI scheme before validation.
Activity
pullfrog commentedon Oct 4, 2026
linear-code commentedon Oct 4, 2026
CODE-666