github-actions[bot] opened a new pull request, #65737: URL: https://github.com/apache/airflow/pull/65737
* Updates the is_url_safe method to reject urls with /// JS's URL constructor sticks to WHATWG's Url parsing for special schemes ref: https://url.spec.whatwg.org/#url-parsing Due to which a host like ///example.com is a valid url in JS and resolves to http(s)://example.com if the base url is a http(s) URL. The same thing happens with \. * Adds unit tests for is_safe_url (cherry picked from commit 555f35576e3143dec65a7fb9acd95891841b45f2) Co-authored-by: Aritra Basu <[email protected]> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
