Ta Duc Thien c6180a0852 caddyhttp: fix path_regexp (MatchPathRE) Windows backslash bypass (#7858) ... * caddyhttp: normalize Windows path in path_regexp matcher, shared with path matcher Apply the same Windows path normalization to MatchPathRE that MatchPath already had, and factor it into a shared normalizeWindowsPath helper so both matchers use one implementation. Also strip trailing dots and spaces per path component (not only at the end of the whole path), matching how Windows resolves paths; this fixes the same gap in the path matcher too. Adds regression tests for both matchers. See #5613. * caddyhttp: normalize trailing dots/spaces in escaped-path branch too The MatchPath escaped-path branch (taken when a matcher pattern contains '%') only folded backslash separators via windowsEscapedPathSeparatorRepl; it skipped the per-component trailing dot/space normalization now applied on the decoded branch. On Windows this left a bypass: a matcher such as `path /private%2f*` could be evaded by GET /private.%5csecret.txt, since `private.` and `private` resolve to the same directory on NTFS. Add normalizeWindowsEscapedPath, which trims trailing dots and spaces — literal ("." / " ") and percent-encoded ("%2e" / "%20") — from every component in raw/escaped space, splitting on both '/' and encoded '%2f' separators while preserving them, and leaving "." / ".." for CleanPath. Regression tests cover the literal and percent-encoded variants against a '%'-containing matcher. --------- Co-authored-by: thientd <thien.taduc@ninhthanh.com>		2026-07-11 08:37:44 +10:00
..
caddyevents	refactor: replace HasPrefix+TrimPrefix with CutPrefix (#7095)	2025-06-27 22:04:09 +03:00
caddyfs	events: Refactor; move Event into core, so core can emit events (#6930)	2025-03-29 08:15:43 -06:00
caddyhttp	caddyhttp: fix path_regexp (MatchPathRE) Windows backslash bypass (#7858)	2026-07-11 08:37:44 +10:00
caddypki	tls: Add tls_resolvers global option for DNS challenge configuration (#7297)	2026-03-01 15:32:04 -05:00
caddytls	caddytls: skip idna.ToASCII for pure ASCII SNI values (#7770)	2026-05-28 11:18:09 +10:00
filestorage	caddyfile: Normalize & flatten all unmarshalers (#6037)	2024-01-23 19:36:59 -05:00
internal/network	core: add modular network_proxy support (#6399)	2025-03-21 17:06:15 +00:00
logging	chore: clean up wording and typo fixes (#7745)	2026-05-20 16:36:30 +10:00
metrics	metrics: scope metrics to active config, add optional per-host metrics (#6531)	2024-10-02 08:23:26 -06:00
standard	filesystem: Globally declared filesystems, fs directive (#5833)	2024-01-13 20:12:43 +00:00