url: always strip username, password, port, fragment

2023-12-14 23:57:00 +00:00 · 2023-12-14 23:57:00 +00:00 · 18a3c06a9e
commit 18a3c06a9e
parent e1fa32beb3
1 changed files with 3 additions and 1 deletions
--- a/src/modules/processing/url.js
+++ b/src/modules/processing/url.js
@ -60,9 +60,11 @@ export function cleanURL(url) {
    }

    if (stripQuery) {
-        url.search = url.hash = ''
+        url.search = ''
    }

+    url.username = url.password = url.port = url.hash = ''
+
    if (url.pathname.endsWith('/'))
        url.pathname = url.pathname.slice(0, -1);