c2bb354675
This takes PathNormalizer from Kestrel to normalize the request path and prevent traversals. (e.g. "/./" and "/../"). In 2.1 only HttpSys was affected. In 2.2 HttpSys and IIS-in-proc will share this code (with additional tests). In 3.0 we'll refactor it to use more shared source across all three servers. |
||
|---|---|---|
| .. | ||
| Antiforgery | ||
| Azure | ||
| AzureIntegration | ||
| DataProtection | ||
| DefaultBuilder | ||
| Features/JsonPatch | ||
| Hosting | ||
| Html/Abstractions | ||
| Http | ||
| Identity | ||
| Installers | ||
| Middleware | ||
| MusicStore | ||
| Mvc | ||
| PackageArchive | ||
| Packages | ||
| Razor | ||
| Security | ||
| Servers | ||
| Shared | ||
| SignalR | ||
| SiteExtensions | ||
| Templating | ||
| Tools | ||