Reject import URLs that carry a query string or fragment

They would otherwise be stored and shown with the import source, possibly carrying a credential.

Assisted-by: Crush

taigrrcommitted 2 days agoparent c36f7c2e87213e1aa7447988d1e7dd28ee436adf506bf86Browse files