socket.io icon indicating copy to clipboard operation
socket.io copied to clipboard

node 24 DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities

Open StageDog opened this issue 4 months ago • 1 comments

Describe the bug

[DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.
(Use `node --trace-deprecation ...` to show where the warning was created)

To Reproduce https://github.com/socketio/socket.io/blob/e95f6abf93766662cd3b341599ed312f4330213f/packages/socket.io/lib/client.ts#L272

Expected behavior

const { URL } = require('url');
const url = new URL(uri);

StageDog avatar Aug 06 '25 13:08 StageDog