URL validator can be tricked

[jg-you]

Example: https://playmoney.dev/questions/cm8pa8lyr0000u4em2rnxkgpv/test-please-ignore-2
In the API: https://api.playmoney.dev/v1/markets/cm8pa8lyr0000u4em2rnxkgpv/activity

The component seems to validate URLs.
I think it is an upstream bug with zod: colinhacks/zod#2236

Some commenters on this issue suggest regexes as a fix

  const urlPattern = new RegExp(
      '^(https?:\\/\\/)?' + // protocol
      '((([a-z\\d]([a-z\\d-]*[a-z\\d])*)\\.)+[a-z]{2,}|' + // domain name
      '((\\d{1,3}\\.){3}\\d{1,3}))' + // OR ip (v4) address
      '(\\:\\d+)?(\\/[-a-z\\d%_.~+]*)*' + // port and path
      '(\\?[;&a-z\\d%_.~+=-]*)?' + // query string
      '(\\#[-a-z\\d_]*)?$', 'i' // fragment locator
);

Not sure where that would fit best in the code base!