You've been wrapping `new URL()` in try/catch. `URL.parse()` does it natively.

Every codebase has this utility function somewhere. You wrote it the first time an untrusted URL caused an uncaught exception, or when a form field needed validation before submission, or when an API ...