This takes PathNormalizer from Kestrel to normalize the request path and prevent traversals. (e.g. "/./" and "/../"). In 2.1 only HttpSys was affected. In 2.2 HttpSys and IIS-in-proc will share this code (with additional tests). In 3.0 we'll refactor it to use more shared source across all three servers. |
||
|---|---|---|
| .. | ||
| scripts | ||
| targets | ||
| tools | ||
| AspNetCore.snk | ||
| Baseline.Designer.props | ||
| Baseline.xml | ||
| Dependencies.props | ||
| NuGetPackageVerifier.json | ||
| PatchConfig.props | ||
| ProjectReferences.props | ||
| Versions.props | ||
| dependencies.temp.props | ||