url: restrict setting protocol to "file"

Since file URLs can not have `username/password/port`, the specification was updated to restrict setting protocol to "file". Refs: whatwg/url#269 Fixes: #11785 PR-URL: #11887 Reviewed-By: James M Snell <[email protected]> Reviewed-By: Timothy Gu <[email protected]> Reviewed-By: Joyee Cheung <[email protected]>
nodejs · Mar 28, 2017 · c51d925 · c51d925
1 parent 8ab26cf
commit c51d925
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/lib/internal/url.js b/lib/internal/url.js
@@ -122,6 +122,13 @@ function onParseProtocolComplete(flags, protocol, username, password,
   if ((s && !newIsSpecial) || (!s && newIsSpecial)) {
     return;
   }
+  if (protocol === 'file:' &&
+    (ctx.username || ctx.password || ctx.port !== undefined)) {
+    return;
+  }
+  if (ctx.scheme === 'file:' && !ctx.host) {
+    return;
+  }
   if (newIsSpecial) {
     ctx.flags |= binding.URL_FLAGS_SPECIAL;
   } else {