Class SafeURL

src/utils/safe-url.ts:29–148

 * with special characters that might break the standard URL constructor
 */
export class SafeURL implements ISafeURL {
  protocol: string;
  hostname: string;
  port: string;
  pathname: string;
  username: string;
  password: string;
  searchParams: Map<string, string>;

  /**
   * Parse a URL and handle special characters in passwords
   * This is a safe alternative to the URL constructor
   * 
   * @param urlString - The DSN string to parse
   */
  constructor(urlString: string) {
    // Initialize with defaults
    this.protocol = '';
    this.hostname = '';
    this.port = '';
    this.pathname = '';
    this.username = '';
    this.password = '';
    this.searchParams = new Map<string, string>();

    // Validate URL string
    if (!urlString || urlString.trim() === '') {
      throw new Error('URL string cannot be empty');
    }

    try {
      // Extract protocol
      const protocolSeparator: number = urlString.indexOf('://');
      if (protocolSeparator !== -1) {
        this.protocol = urlString.substring(0, protocolSeparator + 1); // includes the colon
        urlString = urlString.substring(protocolSeparator + 3); // rest after ://
      } else {
        throw new Error('Invalid URL format: missing protocol (e.g., "mysql://")');
      }

      // Extract query params if any
      const questionMarkIndex: number = urlString.indexOf('?');
      let queryParams: string = '';
      if (questionMarkIndex !== -1) {
        queryParams = urlString.substring(questionMarkIndex + 1);
        urlString = urlString.substring(0, questionMarkIndex);

        // Parse query parameters
        queryParams.split('&').forEach(pair => {
          const parts: string[] = pair.split('=');
          if (parts.length === 2 && parts[0] && parts[1]) {
            this.searchParams.set(parts[0], decodeURIComponent(parts[1]));
          }
        });
      }

      // Extract authentication
      const atIndex: number = urlString.indexOf('@');