normalize-url v3 is vulnerable

[lykims]

Following the issues IonicaBizau/parse-url#19 and IonicaBizau/git-up#24, git-url-parse should have an updated version of git-up to fix the vulnerability.

Two versions to verify:

• [email protected] uses [email protected] that uses [email protected], and [email protected] does not seem to be compatible with Safari.
• [email protected] only requires [email protected] which seems to be OK with Safari. See if git-up could have another version that uses [email protected].

Details about the security issue: https://www.npmjs.com/advisories/1755

[IonicaBizau]

Thank you for this, @lykims! I will try to solve this ASAP...

[agoldis]

For those who need Safari support, inline version w/o normalize-url

https://gist.github.com/agoldis/05aa28e09aa8e549733242bb86834712