It seems that axios v0.19.1 introduced a new bug. 

The bug comes from https://github.com/axios/axios/pull/2464

All urls containing `javascript`keyword is throwing XSS error.  So, all following urls cannot be used in axios any more:

- https://www.javascript.com
- https://stackoverflow.com/questions/tagged/javascript
- https://www.google.com/search?q=javascript

Here is a link to regexp: https://regexr.com/4rsst

Expected behavior: axios should accept `javascript` in urls
test/specs/helpers/isValidXss.spec.js
var isValidXss = require('../../../lib/helpers/isValidXss');
describe('helpers::isValidXss', function () {
  it('should detect script tags', function () {
    expect(isValidXss("<script/xss>alert('blah')</script/xss>")).toBe(true);
    expect(isValidXss("<SCRIPT>alert('getting your password')</SCRIPT>")).toBe(true);
    expect(isValidXss("<script src='http://xssinjections.com/inject.js'>xss</script>")).toBe(true);
    expect(isValidXss("<img src='/' onerror='javascript:alert('xss')'>xss</script>")).toBe(true);
    expect(isValidXss("<script>console.log('XSS')</script>")).toBe(true);
    expect(isValidXss("onerror=alert('XSS')")).toBe(true);
    expect(isValidXss("<a onclick='alert('XSS')'>Click Me</a>")).toBe(true);
  });
  it('should not detect non script tags', function() {
    expect(isValidXss("/one/?foo=bar")).toBe(false);
    expect(isValidXss("<safe> tags")).toBe(false);
    expect(isValidXss("<safetag>")).toBe(false);
    expect(isValidXss(">>> safe <<<")).toBe(false);
    expect(isValidXss("<<< safe >>>")).toBe(false);
    expect(isValidXss("my script rules")).toBe(false);
    expect(isValidXss("<a notonlistener='nomatch'>")).toBe(false);
    expect(isValidXss("<h2>MyTitle</h2>")).toBe(false);
    expect(isValidXss("<img src='#'/>")).toBe(false);
  })
});