A rule for a configured base URL: a non-blank, well-formed http:/https: URL
with no query, fragment or surrounding whitespace. Request paths are appended to
the raw string, so a ? or # would swallow every path (http://h/fs?x=1
requests /fs?x=1/0/query?..., http://h/fs#f requests /fs with no
parameters), and surrounding whitespace, which new URL() trims silently, would
end up in every request URL (/fs%20/0/query). A % in the user name or password must
start a valid escape (%25 for a literal one). The reasons never echo the value, so a
credential in it cannot leak into a message.
A rule for a configured base URL: a non-blank, well-formed
http:/https:URL with no query, fragment or surrounding whitespace. Request paths are appended to the raw string, so a?or#would swallow every path (http://h/fs?x=1requests/fs?x=1/0/query?...,http://h/fs#frequests/fswith no parameters), and surrounding whitespace, whichnew URL()trims silently, would end up in every request URL (/fs%20/0/query). A%in the user name or password must start a valid escape (%25for a literal one). The reasons never echo the value, so a credential in it cannot leak into a message.