DECODE-URL ignores restriction on passwords

[Siskin-Bot]

Submitted by: meijeru

Inspection of SYSTEM/INTRINSIC/PARSE-URL reveals that the charset defined for the optional password component (PASS-CHAR) is not used in the rules. This charset would forbid whitespace in the password.

>> decode-url to-url "ftp://a:b c@d"
== [scheme: 'ftp pass: "b c" user: "a" host: "d"]

---

^{Imported from: CureCode [ Version: alpha 94 Type: Bug Platform: All Category: Mezzanine Reproduce: Always Fixed-in:none ]
Imported from: metaeducation#1333}

Comments:

---

Rebolbot mentioned this issue on Jan 12, 2016:
DECODE-URL and url! syntax don't obey the url encoding rules
TO-URL returns incorrect value for % symbol
LOAD does not handle correctly URLs containing encoded delimiters
MOLD does not handle correctly URLs containing encoded characters

---

Rebolbot added the Type.bug on Jan 12, 2016

---

Oldes commented on Jun 6, 2019:

[scheme: 'ftp pass: "b c" user: "a" host: "d"] result above (which I get in old 2.100.111.3.1 R3 version) seems to be correct or am I missing something?

---

Oldes commented on Jun 6, 2019:

Ah... I see... right... the pass-char value is not used.

---

IngoHohmann mentioned this issue on Feb 5, 2020:
Semicolons should be legal in URL

---

[Oldes]

There is a new version of the decode-url now. Space is allowed as long as it is %-encoded