test(security): cover malformed URL ports

(cherry picked from commit 57d6217281)

tests/test_security.py

@@ -65,6 +65,16 @@ def test_validate_url_rejects_missing_hostname(url):
         validate_url(url)
 
 
+@pytest.mark.parametrize("url", [
+    "http://example.com:abc/path",
+    "https://example.com:65536/path",
+    "http://example.com:0/path",
+])
+def test_validate_url_rejects_invalid_port(url):
+    with pytest.raises(ValueError, match="port"):
+        validate_url(url)
+
+
 # ---------------------------------------------------------------------------
 # safe_fetch - scheme and redirect guards (mocked network)
 # ---------------------------------------------------------------------------