@@ -1296,7 +1296,11 @@ std::optional<std::string> ValidateDatabasePath(Environment* env,
       Utf8Value location_value(env->isolate(), href.As<String>());
       auto location = location_value.ToStringView();
       if (!has_null_bytes(location)) {
-        CHECK(ada::can_parse(location));
+        if (!ada::can_parse(location)) {
+          THROW_ERR_INVALID_URL(env->isolate(), "Invalid URL");
+          return std::nullopt;
+        }
+
         if (!location.starts_with("file:")) {
           THROW_ERR_INVALID_URL_SCHEME(env->isolate());
           return std::nullopt;
 
@@ -269,6 +269,16 @@ test('throws if URL is not file: scheme', (t) => {
   });
 });
 
+test('throws if the URL-like path has an unparsable href', (t) => {
+  const database = new DatabaseSync(':memory:');
+
+  t.after(() => { database.close(); });
+
+  t.assert.throws(() => {
+    backup(database, { href: 'not a url' });
+  }, { code: 'ERR_INVALID_URL' });
+});
+
 test('database backup fails when dest file is not writable', { skip: isRoot }, async (t) => {
   const readonlyDestDb = nextDb();
   writeFileSync(readonlyDestDb, '', { mode: 0o444 });
 
@@ -51,6 +51,12 @@ suite('DatabaseSync() constructor', () => {
     });
   });
 
+  test('throws if the URL-like path has an unparsable href', (t) => {
+    t.assert.throws(() => {
+      new DatabaseSync({ href: 'not a url' });
+    }, { code: 'ERR_INVALID_URL' });
+  });
+
   test('throws if options is provided but is not an object', (t) => {
     t.assert.throws(() => {
       new DatabaseSync('foo', null);