Improve Uri::fromHeaderLinkValue

FactoryTest.php

@@ -703,6 +703,7 @@ public static function provideInvalidHeaderLinkValue(): iterable
         yield 'header value with missing semicolon' => ['html' => '</style.css> title="stylesheet"'];
         yield 'header value with missing parameters' => ['html' => '</style.css>'];
         yield 'header value with missing rel parameter' => ['html' => '</style.css> title="stylesheet"'];
+        yield 'header value with invalid parameters' => ['html' => '<https://example.com/page1> title="prev"; rel="Previous Page"'];
     }
 
     #[Test]

README.md

@@ -28,6 +28,8 @@ IPv4 conversion requires at least one of the following:
 otherwise an exception will be thrown when attempting to convert a host
 as an IPv4 address.
 
+Parsing or generating HTML related content requires the `dom` extension.
+
 Dependencies
 -------
 

Uri.php

@@ -759,8 +759,13 @@ public static function fromHeaderLinkValue(Stringable|string $headerValue, Strin
             throw new InvalidArgumentException('As per RFC8288, the URI must be defined inside two `<>` characters.');
         }
 
+        $parameters = ltrim($matches['parameters']);
+        if (!str_starts_with($parameters, ';')) {
+            throw new InvalidArgumentException('The value `'.$headerValue.'` contains invalid characters.');
+        }
+
         $attributes = [];
-        if (false !== preg_match_all('/;\s*(?<name>\w*)\*?="(?<value>[^"]*)"/', $matches['parameters'], $attrMatches, PREG_SET_ORDER)) {
+        if (false !== preg_match_all('/;\s*(?<name>\w*)\*?="(?<value>[^"]*)"/', $parameters, $attrMatches, PREG_SET_ORDER)) {
             foreach ($attrMatches as $attrMatch) {
                 $attributes[$attrMatch['name']] = $attrMatch['value'];
             }