Fix CVE-2025-56200: Protocol parsing vulnerability in isURL()#2612

Closed

dheedrichard wants to merge 3 commits intovalidatorjs:masterfrom

dheedrichard:fix/cve-2025-56200-protocol-parsing

Commits on Oct 16, 2025

Fix CVE-2025-56200: Protocol parsing vulnerability in isURL()

dheedrichard
and
claude
committed
Fix: Handle authentication URLs correctly (user:@example.com)
dheedrichard
committed
Improve authentication detection with dangerous protocol check
dheedrichard
committed