Reproduction

Steps to reproduce the behavior:

1. fetch('otherdomain[.example.com') will fetch otherdomain/[.example.com

Expected behavior

I believe the request should fail, as is the case with the normal fetch api and location header within browsers.
https://tools.ietf.org/html/rfc1035

Your Environment

Additional context

This has security implicatons, there are circumstances where any subdomains of a specific root domain are allowed to be fetched (and are user-supplied) but node-fetch adds a forward slash and allows other domains to be fetched