isURL allow_protocol_relative_urls intended behavior?

[linkenneth]

What is the intended effect of allow_protocol_relative_urls? It seems to me that there might be a bug, but I'm also not clear on the flag's intended effects. For example:

> isURL('//google.com/login', {require_host: false}) // default allow_protocol_relative_urls: false
true

The source just seems to offset the rest of the parsing by the protocol, and there doesn't seem to be any way that explicitly fails when protocol-relative URLs are used.

https://github.com/chriso/validator.js/blob/master/lib/isURL.js#L86

[chriso]

Thanks, that is indeed a bug.