wrong parse

Working on filtering URL system I found that case where False is expected but return True.

Code to test :

from rfc3986 import is_valid_uri

def test_url(url: str) -> bool:
    try:
        assert is_valid_uri(url, require_scheme=True, require_authority=True, require_path=False)
    except AssertionError:
        return False
    return True

url = "http://'www.amazon.com/s/url=search-alias\%3dstripbooks&field-keywords=z+programming'"
test_url(url)

To be more precise in the report, while RFC 3386 does not explicitly forbid the character ' both RFC1123 and RFC952 prohibit this character in DNS names. Therefore, it should be taken into consideration for this case.

Inizia dal punto di ingresso is_valid_uri e riproduci l’URL dell’issue, concentrandoti su come vengono convalidati authority e hostname. Verifica che questo input venga rifiutato come descritto, quindi aggiungi un test di regressione che copra il hostname tra virgolette ed esegui la suite di test pertinente.