add split limit to url and punycode

Author: gurgunday

lib/punycode.js

@@ -82,7 +82,7 @@ function map(array, callback) {
  * function.
  */
 function mapDomain(domain, callback) {
-	const parts = domain.split('@');
+	const parts = domain.split('@', 2);
 	let result = '';
 	if (parts.length > 1) {
 		// In email addresses, only the domain name should be punycoded. Leave

lib/url.js

@@ -886,10 +886,10 @@ Url.prototype.resolveObject = function resolveObject(relative) {
       // This especially happens in cases like
       // url.resolveObject('mailto:local1@domain1', 'local2@domain2')
       const authInHost =
-        result.host && result.host.indexOf('@') > 0 && result.host.split('@');
+        result.host && result.host.indexOf('@') > 0 && result.host.split('@', 2);
       if (authInHost) {
-        result.auth = authInHost.shift();
-        result.host = result.hostname = authInHost.shift();
+        result.auth = authInHost[0];
+        result.host = result.hostname = authInHost[1];
       }
     }
     result.search = relative.search;
@@ -966,11 +966,10 @@ Url.prototype.resolveObject = function resolveObject(relative) {
     // Occasionally the auth can get stuck only in host.
     // This especially happens in cases like
     // url.resolveObject('mailto:local1@domain1', 'local2@domain2')
-    const authInHost = result.host && result.host.indexOf('@') > 0 ?
-      result.host.split('@') : false;
+    const authInHost = result.host && result.host.indexOf('@') > 0 && result.host.split('@', 2);
     if (authInHost) {
-      result.auth = authInHost.shift();
-      result.host = result.hostname = authInHost.shift();
+      result.auth = authInHost[0];
+      result.host = result.hostname = authInHost[1];
     }
   }