Fix for issue-58 - incorrect parsing of PURLs begining with pkg://

package-url · Dec 6, 2023 · 06c7d20 · 06c7d20
1 parent 163eec5
commit 06c7d20
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 6 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/src/package-url.js b/src/package-url.js
@@ -154,7 +154,8 @@ class PackageURL {
     }
     type = decodeURIComponent(type)
 
-    let url = new URL(purl);
+    // strip /, // and /// as possible in pkg:/ or pkg:// or pkg:///
+    let url = new URL(purl.trim().replace(/^pkg:\/+/g, 'pkg:'));
 
     let qualifiers = null;
     url.searchParams.forEach((value, key) => {
@@ -175,9 +176,7 @@ class PackageURL {
       throw new Error('Invalid purl: cannot contain a "user:pass@host:port"');
     }
 
-    // this strip '/, // and /// as possible in :// or :///
-    // from https://gist.github.com/refo/47632c8a547f2d9b6517#file-remove-leading-slash
-    let path = url.pathname.trim().replace(/^\/+/g, '');
+    let path = url.pathname.trim();
 
     // version is optional - check for existence
     let version = null;