normalize-url 8.0.0 → 8.0.2

package/index.d.ts

@@ -61,10 +61,10 @@ export type Options = {
 
 	@example
 	```
-	normalizeUrl('user:password@sindresorhus.com');
+	normalizeUrl('https://user:password@sindresorhus.com');
 	//=> 'https://sindresorhus.com'
 
-	normalizeUrl('user:password@sindresorhus.com', {stripAuthentication: false});
+	normalizeUrl('https://user:password@sindresorhus.com', {stripAuthentication: false});
 	//=> 'https://user:password@sindresorhus.com'
 	```
 	*/
@@ -285,6 +285,8 @@ export type Options = {
 
 URLs with custom protocols are not normalized and just passed through by default. Supported protocols are: `https`, `http`, `file`, and `data`.
 
+Human-friendly URLs with basic auth (for example, `user:password@sindresorhus.com`) are not handled because basic auth conflicts with custom protocols. [Basic auth URLs are also deprecated.](https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication#access_using_credentials_in_the_url)
+
 @param url - URL to normalize, including [data URL](https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URIs).
 
 @example

package/index.js

@@ -13,7 +13,10 @@ const supportedProtocols = new Set([
 const hasCustomProtocol = urlString => {
 	try {
 		const {protocol} = new URL(urlString);
-		return protocol.endsWith(':') && !supportedProtocols.has(protocol);
+
+		return protocol.endsWith(':')
+			&& !protocol.includes('.')
+			&& !supportedProtocols.has(protocol);
 	} catch {
 		return false;
 	}
@@ -178,7 +181,7 @@ export default function normalizeUrl(urlString, options) {
 	// Decode URI octets
 	if (urlObject.pathname) {
 		try {
-			urlObject.pathname = decodeURI(urlObject.pathname);
+			urlObject.pathname = decodeURI(urlObject.pathname).replace(/\\/g, '%5C');
 		} catch {}
 	}
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "normalize-url",
-	"version": "8.0.0",
+	"version": "8.0.2",
 	"description": "Normalize a URL",
 	"license": "MIT",
 	"repository": "sindresorhus/normalize-url",
@@ -15,11 +15,13 @@
 		"types": "./index.d.ts",
 		"default": "./index.js"
 	},
+	"sideEffects": false,
 	"engines": {
 		"node": ">=14.16"
 	},
 	"scripts": {
-		"test": "xo && c8 ava && tsd"
+		"//test": "xo && c8 ava && tsd",
+		"test": "c8 ava && tsd"
 	},
 	"files": [
 		"index.js",

package/readme.md

@@ -12,8 +12,6 @@ Useful when you need to display, store, deduplicate, sort, compare, etc, URLs.
 npm install normalize-url
 ```
 
-*If you need Safari support, use version 4: `npm i normalize-url@4`*
-
 ## Usage
 
 ```js
@@ -32,6 +30,8 @@ normalizeUrl('//www.sindresorhus.com:80/../baz?b=bar&a=foo');
 
 URLs with custom protocols are not normalized and just passed through by default. Supported protocols are: `https`, `http`, `file`, and `data`.
 
+Human-friendly URLs with basic auth (for example, `user:password@sindresorhus.com`) are not handled because basic auth conflicts with custom protocols. [Basic auth URLs are also deprecated.](https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication#access_using_credentials_in_the_url)
+
 #### url
 
 Type: `string`
@@ -103,10 +103,10 @@ Default: `true`
 Strip the [authentication](https://en.wikipedia.org/wiki/Basic_access_authentication) part of the URL.
 
 ```js
-normalizeUrl('user:password@sindresorhus.com');
+normalizeUrl('https://user:password@sindresorhus.com');
 //=> 'https://sindresorhus.com'
 
-normalizeUrl('user:password@sindresorhus.com', {stripAuthentication: false});
+normalizeUrl('https://user:password@sindresorhus.com', {stripAuthentication: false});
 //=> 'https://user:password@sindresorhus.com'
 ```
 
@@ -310,15 +310,3 @@ normalizeUrl('www.sindresorhus.com?b=two&a=one&c=three', {
 ## Related
 
 - [compare-urls](https://github.com/sindresorhus/compare-urls) - Compare URLs by first normalizing them
-
----
-
-<div align="center">
-	<b>
-		<a href="https://tidelift.com/subscription/pkg/npm-normalize-url?utm_source=npm-normalize-url&utm_medium=referral&utm_campaign=readme">Get professional support for this package with a Tidelift subscription</a>
-	</b>
-	<br>
-	<sub>
-		Tidelift helps make open source sustainable for maintainers while giving companies<br>assurances about security, maintenance, and licensing for their dependencies.
-	</sub>
-</div>