matching non existent tld

[CheweyZ]

running urlRegex({strict: false}).test('something github.are foo bar'); returns true even though "are" isnt on the list of tld's

[mathieumg]

But .ar is and it matches github.ar, although it shouldn't.

[yzaroui]

Well, even worse, when given 'bonjour.bonsoir' it matches bonjour.bo

[niftylettuce]

See my comment in #67 and my new package at https://github.com/niftylettuce/url-regex-safe. We cannot add the fix mentioned in the PR because it is a security vulnerability (as it would not allow us to use RE2 due to the described error thrown).