Skip to content

fix: use url-parse for url construction #15670

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 18 commits into from
Nov 27, 2024
Merged

fix: use url-parse for url construction #15670

merged 18 commits into from
Nov 27, 2024

Conversation

sreya
Copy link
Collaborator

@sreya sreya commented Nov 27, 2024

This fixes some CodeQL-flagged issues. They're not real issues but the refactor is small and it'll keep the analysis tools quiet.

@sreya sreya requested a review from aslilac November 27, 2024 12:15
Copy link
Member

@aslilac aslilac left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we should use the built-in URL type instead.

from the url-parse readme:

url-parse was created in 2014 when the WHATWG URL API was not available in Node.js and the URL interface was supported only in some browsers. Today this is no longer true. The URL interface is available in all supported Node.js release lines and basically all browsers. Consider using it for better security and accuracy.

@sreya sreya requested a review from aslilac November 27, 2024 18:28
@sreya sreya requested a review from aslilac November 27, 2024 18:55
Copy link
Member

@aslilac aslilac left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

couple small notes, but this looks great 👍

@sreya sreya merged commit ffb0ebb into main Nov 27, 2024
26 of 28 checks passed
@sreya sreya deleted the jon/codeql branch November 27, 2024 21:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants