Testing fast-uri@3.1.0
================================

--- Path Traversal Tests ---
normalize(http://example.com/public/%2e%2e/admin) => http://example.com/admin
equal(http://example.com/public/%2e%2e/admin vs http://example.com/admin) => true

--- Host Delimiter Injection Tests ---
normalize host %40(http://trusted.com%40evil.com/) => http://trusted.com@evil.com/
normalize host %3A(http://example.com%3A8080/) => http://example.com:8080/
normalize host %2F(http://example.com%2Fevil.com/path) => http://example.com/evil.com/path
equal host %40(http://trusted.com%40evil.com/ vs http://trusted.com@evil.com/) => true
equal host %3A(http://example.com%3A8080/ vs http://example.com:8080/) => true
equal host %2F(http://example.com%2Fevil.com/path vs http://example.com/evil.com/path) => true

--- Parsed Host Values ---
parse(http://trusted.com%40evil.com/).host => trusted.com@evil.com
parse(http://example.com%3A8080/).host => example.com:8080
parse(http://example.com%2Fevil.com/path).host => example.com/evil.com

=== VERDICT ===
Path traversal vulnerable: true
Host delimiter injection vulnerable: true
VARIANT CONFIRMED: Host delimiter injection still present in this version