Describe the bug
Faker::Internet.url, and Faker::Internet.email generate potentially real domain names and email addresses. Using potentially real urls and email addresses in automated testing environments is a security vulnerability. Faker is extensively used in automated test environments to generate test data.
To Reproduce
Call Faker::Internet.url and see that the result is a url that could resolve to a real domain name, with a tld of .com.
Expected behavior
A TLD of .test or .example should be used instead. See RFC2606
Additional context
I understand that some users would like to see .com urls in their Faker output. I'd like to suggest that this should be easy to do by opting in to this behaviour instead of it being the default. Perhaps a parameter for specifying the tld when generating an email address or url? The default behaviour however should be safe.
Describe the bug
Faker::Internet.url, and Faker::Internet.email generate potentially real domain names and email addresses. Using potentially real urls and email addresses in automated testing environments is a security vulnerability. Faker is extensively used in automated test environments to generate test data.
To Reproduce
Call
Faker::Internet.urland see that the result is a url that could resolve to a real domain name, with a tld of.com.Expected behavior
A TLD of
.testor.exampleshould be used instead. See RFC2606Additional context
I understand that some users would like to see
.comurls in their Faker output. I'd like to suggest that this should be easy to do by opting in to this behaviour instead of it being the default. Perhaps a parameter for specifying the tld when generating an email address or url? The default behaviour however should be safe.