Unsafe URL validation regex

I discovered by accident that the regex used for URL validation is unsafe. Try running the following in your browser console:

/^https?:\/\/([\da-z\.-]+)\.([a-z\.]{2,6})([\/\w\.\(\)%-]*)*\/?$/.test('https://d1qb2nb5cznatu.cloudfront.net/startups/i/262548-4bef7a1950ac2fb9034ca8cc4fd5a44d-medium_jpg.jpg?buster=1399656027')

This will cause your CPU to spike and probably crash your browser. I’m not sure what is it about that particular URL but it seems to be triggering some sort of bug.

Please consider using validator.js library instead of re-implementing validation rules. This library is still actively developed, been through many release cycles since 2013 and is well tested. If you keep maintaining your own rules you will run into issues like that down the road.

Keep up the good work.

[logaretm]

OK I added validator to the dev dependencies and I replaced some rules with their implementation, this should allow new rules to be imported from validator.js as well.

[BrandonSurowiec]

@logaretm What do you think about including the credit card validation that validator.js has?