nodejs
diff --git a/Collapse file
‎doc/api/url.md‎
Copy file name to clipboardExpand all lines: doc/api/url.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff b/Collapse file
‎doc/api/url.md‎
Copy file name to clipboardExpand all lines: doc/api/url.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
@@ -1847,7 +1847,7 @@ input. CVEs are not issued for `url.parse()` vulnerabilities. Use the
 function getURL(req) {
   const proto = req.headers['x-forwarded-proto'] || 'https';
   const host = req.headers['x-forwarded-host'] || req.headers.host || 'example.com';
-  return new URL(req.url || '/', `${proto}://${host}`);
+  return new URL(`${proto}://${host}${req.url || '/'}`);
 }
 ```
 
@@ -1857,7 +1857,7 @@ use the example below:
 
 ```js
 function getURL(req) {
-  return new URL(req.url || '/', 'https://example.com');
+  return new URL(`https://example.com${req.url || '/'}`);
 }
 ```