You'll notice
Path/URL validation now rejects raw control characters and DEL
What
A validator that checks whether a string looks like a valid URL or file path already rejected backslashes and whitespace. It now also rejects raw control characters and the DEL character (the ranges \x00-\x1f and \x7f).
Why
This tightens what counts as a well-formed path or URL, catching invisible or non-printable characters that could otherwise slip through validation and cause unexpected behavior.