Issues

• Constructor and set('auth') throw URIError on malformed percent-encoding (WHATWG URL tolerates it)

  unshiftio/url-parse#242 · Filter by author manqingzhou opened on Sep 16, 2026

• Security: Hostname bypass via Unicode confusable characters (SSRF/allowlist bypass)

  unshiftio/url-parse#241 · Filter by author 0xBassia opened on Apr 8, 2026
  1

• Why isn't the package deprecated?

  unshiftio/url-parse#240 · Filter by author 43081j opened on Apr 8, 2026

• CodeQL raises js/remote-property-injection finding

  unshiftio/url-parse#239 · Filter by author MiikaKarkkainen opened on Nov 24, 2025
  1

• Is colon required when specifying the protocol

  unshiftio/url-parse#221 · Filter by author humphreyn opened on Jan 4, 2022
  2

• unexpected encode behaviour for set query

  unshiftio/url-parse#220 · Filter by author herbertpimentel opened on Dec 23, 2021
  1

• url.set() doesn't work as expected with property 'origin'

  unshiftio/url-parse#182 · Filter by author egold opened on Sep 13, 2019
  2

• extractProtocol method takes too much time

  unshiftio/url-parse#179 · Filter by author adityapatadia opened on Jun 11, 2019
  2

• ES Modules

  unshiftio/url-parse#168 · Filter by author lastmjs opened on Mar 1, 2019
  6

• searchParams is not available (though query is)

  unshiftio/url-parse#162 · Filter by author prabashn opened on Nov 7, 2018
  3

• Indirect dependency on Node environment

  unshiftio/url-parse#150 · Filter by author kamsar opened on Jun 29, 2018
  3

• Option to keep default port

  unshiftio/url-parse#132 · Filter by author lutovich opened on Apr 27, 2018
  10

• Resolve relative urls using HTML <base>

  unshiftio/url-parse#114 · Filter by author OmgImAlexis opened on Mar 10, 2018
  4

• How to get an unqualified url?

  unshiftio/url-parse#78 · Filter by author ccorcos opened on Oct 31, 2017
  3

• origin defaults to "null"

  unshiftio/url-parse#38 · Filter by author gt53 opened on Sep 2, 2016
  8

• Correctly handle blob urls

  bug
  unshiftio/url-parse#37 · Filter by author 3rd-Eden opened on Aug 15, 2016