CVE-2020-7071: fix URL validation with functions like
filtervar($url, FILTERVALIDATE_URL)
CVE-2021-21705: fix URL validation functionality via filtervar() function
with FILTERVALIDATE_URL parameter when an URL with invalid password field
can be accepted as valid