- RFC 3447 and RFC 8017 allow for optional`DigestAlgorithm``NULL` parameters

for`sha*` algorithms and require`NULL`paramters for`md2` and`md5`

for`sha*` algorithms and require`NULL`parameters for`md2` and`md5`

algorithms.

and is being removed rather than fixed.

-**SECURITY**,**BREAKING**: Remove`forge.util.parseUrl()` (and

`forge.http.parseUrl` alias) and use the[WHATWG URL

Standard](https://url.spec.whatwg.org/).`URL` is supported by modern browers

and modern Node.js. This change is needed to address URL parsing security

issues. If`forge.util.parseUrl()` is used directly or through`forge.xhr` or

`forge.http` APIs, and support is needed for environments without`URL`

support, then a polyfill must be used.

Standard](https://url.spec.whatwg.org/).`URL` is supported by modern

browsersand modern Node.js. This change is needed to address URL parsing

securityissues. If`forge.util.parseUrl()` is used directly or through

`forge.xhr` or`forge.http` APIs, and support is needed for environments

without`URL`support, then a polyfill must be used.

-**BREAKING**: Remove`forge.task` API. This API was never used, documented,

or advertised by the maintainers. If anyone was using this API and wishes to

continue development it in other project, please let the maintainers know.