Vouch request: AmeerAliAnwar #3989
AmeerAliAnwar
started this conversation in
Vouch Request
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Why this change?
I am fixing issue #3902 where L7 path canonicalization percent-decodes the request path before stripping path parameters. This causes percent-encoded semicolons (%3B) to be treated as parameter delimiters, silently truncating the forwarded request path upstream (for example,
DELETE /objects/backup%3Boldwas being forwarded asDELETE /objects/backup). The fix carries %3B as a C0 sentinel so that only literal semicolons strip parameters, while preserving dot-segment traversal protection (..%3B).Checklist
All reactions