Matthew HoltandCopilot 7593fd002f rewrite: clean paths before regexp replacement changes depth ...

Canonicalize the path before capturing and substituting its components, not only afterward. Retain repeated slashes, query strings and valid alternate encodings; cover the supplied depth-changing traversal and encoded dot segments.

Addresses scan report 34013c71-0786-4179-8403-eacc143a1d89 (marked duplicate, but not fixed by the prior post-replacement safeguard).

Code written by GitHub Copilot (GPT-6.1 Sol, Claude Opus 5.5); reviewed by mholt.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-11-11 11:06:41 -07:00

..

caddyfile.go

chore: Dumb prealloc lint fix (#7430)

2026-01-13 14:13:43 -05:00

rewrite_bench_test.go

caddyhttp: presize buffers in hot paths to reduce allocations (#7842)

2026-11-04 20:26:53 +00:00

rewrite_regexp_clean_test.go

rewrite: clean paths before regexp replacement changes depth

2026-11-11 11:06:41 -07:00

rewrite_test.go

rewrite: escape decoded original and component path placeholders

2026-11-11 11:06:40 -07:00

rewrite.go

rewrite: clean paths before regexp replacement changes depth

2026-11-11 11:06:41 -07:00