mirror of
https://github.com/domainaware/parsedmarc.git
synced 2026-07-31 20:52:17 +00:00
- Replace unsafe substring checking (in operator) with proper URL parsing - Use urllib.parse.urlparse to validate URL components (scheme, netloc, path) - Check specific URL parts (netloc) instead of substring matching anywhere in URL - Fixes 3 CodeQL "Incomplete URL substring sanitization" alerts - All 13 tests still passing