Consider malcrafted url's

[wmrutten]

There's a discussion on Zulip about malcrafted urls:
https://chat.fhir.org/#narrow/stream/implementers/subject/URL.20Parsing

Exploits by Orange Tsai:
https://www.blackhat.com/docs/us-17/thursday/us-17-Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf
http://blog.orange.tw/2017/07/how-i-chained-4-vulnerabilities-on.html

List of test url's
https://www.lookout.net/test/url/

Maybe we can implement at least some unit tests for this?

[marcovisserFurore]

These kinds of exploits should be resolved and handled by the server, not this SDK. Because it cannot know the context it is in.