normalize-url v3 is vulnerable

[lykims]

Following the issues IonicaBizau/parse-url#19 and IonicaBizau/git-up#24, git-url-parse should have an updated version of git-up to fix the vulnerability.

Two versions to verify:

• git-up@5.0.0 uses parse-url@6.0.0 that uses normalize-url@6.1.0, and normalize-url@6.1.0 does not seem to be compatible with Safari.
• parse-url@5.0.7 only requires normalize-url@4.5.1 which seems to be OK with Safari. See if git-up could have another version that uses parse-url@5.0.7.

Details about the security issue: https://www.npmjs.com/advisories/1755

[IonicaBizau]

Thank you for this, @lykims! I will try to solve this ASAP...

[agoldis]

For those who need Safari support, inline version w/o normalize-url

https://gist.github.com/agoldis/05aa28e09aa8e549733242bb86834712