package-url / packageurl-go / 32453765209

89%

master: 89%

Pull #93

github

Percent-encode sub-delimiters in name/version path segments

Per the purl spec character-encoding section, the only characters that may
appear unencoded in a name or version path segment are alphanumerics, the
unreserved punctuation '-', '.', '_', '~', and the colon ':'. All other
characters — including RFC 3986 sub-delimiters such as '(', ')', '!', '$',
'&', "'", '*', ',', ';', '=' — must be percent-encoded.

Tighten isPathSegmentSafe to the spec's allow-list, drop the now-identical
isSubpathSafe helper, and reuse isPathSegmentSafe from escapeSubpath. Add
a TestRoundtrip case covering spaces, '+', parens, and '*' in name/version
so this surface is no longer untested.

2 of 2 new or added lines in 1 file covered. (100.0%)

425 of 480 relevant lines covered (88.54%)

1115.45 hits per line