Investigate using upstream url
parser
#333
Labels
dependencies
Pull requests that update a dependency file
url
parser
#333
adblock-rust
's URL parsing is an in-tree fork of some files from therust-url
project.According to eed6eb0, it was done this way in order to slim down the full URL parser, likely for performance reasons. That being said, it's now a ~5 year old implementation that hasn't received any security updates or bugfixes.
If possible, I'd prefer to get this situation sorted out by using a well-audited upstream implementation, whether that is directly from
rust-url
or elsewhere.The text was updated successfully, but these errors were encountered: