This review targets only observable compliance with the WHATWG URL parser and Unicode UTS #46. It does not assume that Ada is deployed, and it does not depend on an exploit or production impact.
Tested Ada commit: 4eee4c204d4581518e3d034ef899560ca23d3850.
Ada's ordinary URL state machine performed very well. It matched the maintained whatwg-url reference on 101,822 generated parsing cases and 102,880 setter operations.