URL 解析器
将 URL 分解为各个组成部分
使用方法
粘贴或输入内容
在输入区域输入您的文字、代码或数据。
选择选项
选取要应用的转换方式或格式。
复制结果
一键将输出结果复制到剪贴板。
为什么使用此工具
100% 免费
没有隐藏费用，没有付费等级——所有功能完全免费。
无需安装
完全在浏览器中运行。无需下载或安装任何软件。
隐私且安全
您的数据永远不会离开您的设备。不会上传至任何服务器。
支持移动设备
完全响应式设计——在手机、平板或桌面电脑上均可使用。
URL Anatomy: Understanding Web Address Components
Key Takeaways
- A URL consists of scheme, authority (host + port), path, query parameters, and fragment — each serving a distinct purpose.
- Proper URL parsing prevents security vulnerabilities like open redirects, SSRF, and path traversal attacks.
- All URL parsing happens in your browser using the native URL API — no data is sent to any server.
URLs (Uniform Resource Locators) are the addressing system of the web. Every link clicked, API called, and resource loaded relies on correctly structured URLs. Understanding URL components — from protocol and hostname to query parameters and fragments — is essential for web development, API design, security auditing, and debugging network issues.
The URL standard (WHATWG) replaced RFC 3986 for browser implementations, resolving decades of parsing inconsistencies.
Standards Evolution
Key Concepts
URL Components
Protocol (https:), host (www.example.com), port (:443), pathname (/api/v1/users), search (?id=123&sort=name), hash (#section2). Each component has specific encoding rules.
Origin and Same-Origin Policy
A URL's origin is the combination of protocol, host, and port. The same-origin policy restricts how documents from one origin can interact with resources from another, forming a cornerstone of web security.
Query String Parameters
Query parameters (key=value pairs after ?) pass data to servers. URLSearchParams API provides methods to parse, build, and manipulate query strings programmatically.
Relative vs. Absolute URLs
Absolute URLs include the full path from protocol. Relative URLs resolve against a base URL. Understanding resolution rules prevents broken links and security issues in web applications.
Pro Tips
Always use the URL constructor (new URL()) for parsing — it handles edge cases that string splitting misses.
Use URLSearchParams for query string manipulation instead of manual string concatenation to avoid encoding errors.
Validate URL origins before redirecting users to prevent open redirect vulnerabilities in authentication flows.
Remember that the fragment (#hash) is never sent to the server — it is client-side only, used for in-page navigation and SPA routing.
All URL parsing is performed entirely in your browser using the native URL API. Your URLs, which may contain authentication tokens or sensitive parameters, are never transmitted to any external server.