Fix for URLs with invalid characters in userinfo part (#70)

* Add another invalid test URL; #69

* Be stricter in characters allowed in userinfo URL part; #69

* Break long line for pep8 compliance; #69

tests/test_url.py

@@ -116,7 +116,8 @@ def test_returns_true_on_valid_public_url(address, public):
     'http://.www.foo.bar/',
     'http://www.foo.bar./',
     'http://.www.foo.bar./',
-    'http://127.12.0.260'
+    'http://127.12.0.260',
+    'http://example.com/">user@example.com',
 ])
 def test_returns_failed_validation_on_invalid_url(address):
     assert isinstance(url(address), ValidationFailure)

validators/url.py

@@ -10,7 +10,8 @@
     # protocol identifier
     u"(?:(?:https?|ftp)://)"
     # user:pass authentication
-    u"(?:\S+(?::\S*)?@)?"
+    u"(?:[-a-z\u00a1-\uffff0-9._~%!$&'()*+,;=:]+"
+    u"(?::[-a-z0-9._~%!$&'()*+,;=:]*)?@)?"
     u"(?:"
     u"(?P<private_ip>"
     # IP address exclusion
@@ -43,9 +44,11 @@
     # port number
     u"(?::\d{2,5})?"
     # resource path
-    u"(?:/\S*)?"
+    u"(?:/[-a-z\u00a1-\uffff0-9._~%!$&'()*+,;=:@/]*)?"
     # query string
     u"(?:\?\S*)?"
+    # fragment
+    u"(?:#\S*)?"
     u"$",
     re.UNICODE | re.IGNORECASE
 )