URL.canParse

Parsing of URLs on the consumer facet has been a typical follow for twenty years. The early days included utilizing illegible common expressions however the JavaScript specification ultimately developed right into a new URL methodology of parsing URLs. Whereas URL is extremely helpful when a legitimate URL is offered, an invalid string will throw an error — yikes! A brand new methodology, URL.canParse, will quickly be obtainable to validate URLs!

Offering a malformed URL to new URL will throw an error, so each use of new URL would have to be inside a attempt/catch block:

// The proper, most secure approach
attempt {
  const url = new URL('https://davidwalsh.identify/pornhub-interview');
} catch (e) {
  console.log("Dangerous URL offered!");
}

// Oops, these are problematic (principally relative URLs)
new URL('/');
new URL('../');
new URL('/pornhub-interview');
new URL('?q=search+time period');
new URL('davidwalsh.identify');

// Additionally works
new URL('javascript:;');

As you’ll be able to see, strings that will work correctly with an <a> tag typically will not with new URL. With URL.canParse, you’ll be able to keep away from the attempt/catch mess to find out URL validity:

// Detect problematic URLs
URL.canParse('/'); // false
URL.canParse('/pornhub-interview'); // false
URL.canParse('davidwalsh.identify'); //false

// Correct utilization
if (URL.canParse('https://davidwalsh.identify/pornhub-interview')) {
  const parsed = new URL('https://davidwalsh.identify/pornhub-interview');
}

We have come a good distance from cryptic regexes and burner <a> components to this URL and URL.canParse APIs. URLs characterize a lot greater than location as of late, so having a dependable API has helped internet builders a lot!