URL constructor doesn't allow credential

Issue #8004284 • Assigned to Nicolas A.


Simon C.
Jun 27, 2016
This issue is public.
Found in
  • Microsoft Edge
Standard affected
URL Standard

Found in build #
Reported by 3 people

Sign in to watch or report this issue.

Steps to reproduce

The code new URL("http://username:password@") throws A security problem occurred. on Edge (14.14372).

The standard never mentions about disallowing credential in URLs, and the code above runs successfully in Firefox (48) and Chrome (52) and returns username and password without problem.

I’m porting an extension from Chrome, it relies on this API to parse URL and make requests.


Comments and activity

  • Microsoft Edge Team

    Changed Assigned To to “Brad E.”

  • Where are you getting this error at in Edge? I have searched the event viewer and the console but am not seeing the error you describe in builds 10586+

    All the best,
    The MS Edge Team

  • In the console. I have uploaded a screenshot.

    Also tested in 10586, same result.

  • Microsoft Edge Team

    Changed Assigned To to “Travis L.”

    Changed Assigned To to “Venkat K.”

    Changed Assigned To from “Venkat K.” to “Nicolas A.”

  • Is this by design or a bug? Still experiencing this in Microsoft EdgeHTML 17.17134.

You need to sign in to your Microsoft account to add a comment.

Sign in