Skip to content

fix(static): reject encoded path separator to prevent route-level auth bypass #1513

fix(static): reject encoded path separator to prevent route-level auth bypass

fix(static): reject encoded path separator to prevent route-level auth bypass #1513

Triggered via pull request June 14, 2026 13:36
Status Failure
Total duration 54s
Artifacts

echo.yml

on: pull_request
Matrix: test
Benchmark comparison
0s
Benchmark comparison
Fit to window
Zoom out
Zoom in

Annotations

5 errors and 2 notices
windows-latest @ Go 1.25
Process completed with exit code 1.
macos-latest @ Go 1.26
The strategy configuration was canceled because "test.windows-latest_1_25" failed
macos-latest @ Go 1.26
The operation was canceled.
windows-latest @ Go 1.26
The strategy configuration was canceled because "test.windows-latest_1_25" failed
windows-latest @ Go 1.26
The operation was canceled.
windows-latest @ Go 1.25
NOTICE: windows-latest requests are being redirected to windows-2025-vs2026 by June 15, 2026
windows-latest @ Go 1.26
NOTICE: windows-latest requests are being redirected to windows-2025-vs2026 by June 15, 2026