However, this doesn't cover DNS name validation for the hostname:
"This specification does not mandate a particular registered name lookup technology and therefore does not restrict the syntax of reg-name beyond what is necessary for interoperability"
It also doesn't constrain the userinfo ("username:password") part described in this vulnerability.
However, this doesn't cover DNS name validation for the hostname:
"This specification does not mandate a particular registered name lookup technology and therefore does not restrict the syntax of reg-name beyond what is necessary for interoperability"
It also doesn't constrain the userinfo ("username:password") part described in this vulnerability.
So yeah, it's non-trivial.