Preserve path traversal vulnerability

[derevnjuk]

The current implementation of URL parsing and validation in the application does not allow to detect the directory traversal vulnerability. The application is using the secure WHATWG API instead of the less secure url.parse().

Steps to Reproduce:

1. Use the following URLs to exploit the vulnerability:

• http://192.168.0.161:3000/public/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
• http://192.168.0.161:3000/public/../../../../../../etc/passwd

2. Observe the resulting URL after parsing and validation.

Expected Result:
The application should send a request by the following /public/../../../../../../etc/passwd paht. The resulting URL should allow access to sensitive files outside the intended directory.

Actual Result:
The application does not allow directory traversal attacks. As a result, the parsed URL is http://192.168.0.161:3000/etc/passwd.