You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PermissionsArea: what it touches
Bug FixesKind: in v2.1.269,
Bug FixesSection of the release
What
A validator that checks whether a string looks like a valid URL or file path already rejected backslashes and whitespace. It now also rejects raw control characters and the DEL character (the ranges \x00-\x1f and \x7f).
Why
This tightens what counts as a well-formed path or URL, catching invisible or non-printable characters that could otherwise slip through validation and cause unexpected behavior.
