Kikobeats / parse-proxy-uri / 31016687283

100%

push

github

fix: keep ProxyURL credentials WHATWG-compatible (#26)

* fix: keep ProxyURL credentials WHATWG-compatible

Returning decoded username/password broke URL consumers that call
decodeURIComponent (e.g. got-scraping): passwords with `%` throw
URIError, and `%25xx` sequences double-decode into the wrong secret.

Keep the native percent-encoded getters, expose decoded credentials via
`auth`, reject control characters in userinfo, and only short-circuit
reparse for real ProxyURL instances so `{ __parsed__: true }` cannot
spoof validation.

Co-authored-by: kikohumanbeatbox <kikohumanbeatbox@gmail.com>

* refactor: drop dead descriptor indirection and __parsed__ marker

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MTbj6CYXGsk6rhXx7J8SUP

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: kikohumanbeatbox <kikohumanbeatbox@gmail.com>
Co-authored-by: Kiko Beats <josefrancisco.verdu@gmail.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

42 of 44 branches covered (95.45%)

Branch coverage included in aggregate %.

24 of 24 new or added lines in 1 file covered. (100.0%)

113 of 113 relevant lines covered (100.0%)

24.53 hits per line