b9c8f34919
This takes PathNormalizer from Kestrel to normalize the request path and prevent traversals. (e.g. "/./" and "/../"). In 2.1 only HttpSys was affected (https://dev.azure.com/dnceng/internal/_git/aspnet-AspNetCore/pullrequest/1480). In 2.2 HttpSys and IIS-in-proc share this code (with additional tests). In 3.0 we'll refactor it to use more shared source across all three servers. |
||
|---|---|---|
| .. | ||
| scripts | ||
| targets | ||
| tools | ||
| AspNetCore.snk | ||
| Baseline.Designer.props | ||
| Baseline.xml | ||
| Dependencies.props | ||
| NuGetPackageVerifier.json | ||
| PatchConfig.props | ||
| ProjectReferences.props | ||
| Versions.props | ||
| signcheck.exclusions.txt | ||