René's URL Explorer Experiment


Title: revert PR #3009 changes to just disabling path escaping by default in static methods/middleware by aldas · Pull Request #3016 · labstack/echo · GitHub

Open Graph Title: revert PR #3009 changes to just disabling path escaping by default in static methods/middleware by aldas · Pull Request #3016 · labstack/echo

X Title: revert PR #3009 changes to just disabling path escaping by default in static methods/middleware by aldas · Pull Request #3016 · labstack/echo

Description: High performance, minimalist Go web framework. Contribute to labstack/echo development by creating an account on GitHub.

Open Graph Description: Revert PR #3009 changes to just disabling path escaping by default in static methods/middleware #3009 is a little bit brute force hack to solve the problem from LLM. Claude proposed checking and fi...

X Description: Revert PR #3009 changes to just disabling path escaping by default in static methods/middleware #3009 is a little bit brute force hack to solve the problem from LLM. Claude proposed checking and fi...

Opengraph URL: https://github.com/labstack/echo/pull/3016

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:c5a8c163-433f-6226-a44d-c05e2eb6e742
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id9ECE:11D011:15F3C41:1DCE882:6A62B446
html-safe-nonce220b6674f0fe8b8a380ee8566b3433be636fc2b3067d598c2f9af01f1ab47dd4
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5RUNFOjExRDAxMToxNUYzQzQxOjFEQ0U4ODI6NkE2MkI0NDYiLCJ2aXNpdG9yX2lkIjoiNDgzMTgyOTMzMjA4NzQ1Mjc0MiIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmace3cc099b17339204e176b1b14eb9e35637101c254cbc27fd10421645eb308c4d
hovercard-subject-tagpull_request:3865113348
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/labstack/echo/3016/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/0837728590d61097228d6713b09b76ff125b0071bb9998daedc19b8626bb5d20/labstack/echo/pull/3016
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/0837728590d61097228d6713b09b76ff125b0071bb9998daedc19b8626bb5d20/labstack/echo/pull/3016
og:image:altRevert PR #3009 changes to just disabling path escaping by default in static methods/middleware #3009 is a little bit brute force hack to solve the problem from LLM. Claude proposed checking and fi...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernamealdas
hostnamegithub.com
expected-hostnamegithub.com
None2738d7125e864b55224a8bc40c72c220ca7d2c73f91a7bb8d69dffe9d35e997d
turbo-cache-controlno-cache
go-importgithub.com/labstack/echo git https://github.com/labstack/echo.git
octolytics-dimension-user_id2624634
octolytics-dimension-user_loginlabstack
octolytics-dimension-repository_id31504491
octolytics-dimension-repository_nwolabstack/echo
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id31504491
octolytics-dimension-repository_network_root_nwolabstack/echo
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
releasebf54af498459157b66a67136f992a68752cdbb54
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/labstack/echo/pull/3016#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Flabstack%2Fecho%2Fpull%2F3016
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
Code QualityEnforce quality at mergehttps://github.com/features/code-quality
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Flabstack%2Fecho%2Fpull%2F3016
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=labstack%2Fecho
Reloadhttps://github.com/labstack/echo/pull/3016
Reloadhttps://github.com/labstack/echo/pull/3016
Reloadhttps://github.com/labstack/echo/pull/3016
Please reload this pagehttps://github.com/labstack/echo/pull/3016
labstack https://github.com/labstack
echohttps://github.com/labstack/echo
Please reload this pagehttps://github.com/labstack/echo/pull/3016
Notifications https://github.com/login?return_to=%2Flabstack%2Fecho
Fork 2.3k https://github.com/login?return_to=%2Flabstack%2Fecho
Star 32.5k https://github.com/login?return_to=%2Flabstack%2Fecho
Code https://github.com/labstack/echo
Issues 8 https://github.com/labstack/echo/issues
Pull requests 20 https://github.com/labstack/echo/pulls
Discussions https://github.com/labstack/echo/discussions
Actions https://github.com/labstack/echo/actions
Projects https://github.com/labstack/echo/projects
Wiki https://github.com/labstack/echo/wiki
Security and quality 2 https://github.com/labstack/echo/security
Insights https://github.com/labstack/echo/pulse
Code https://github.com/labstack/echo
Issues https://github.com/labstack/echo/issues
Pull requests https://github.com/labstack/echo/pulls
Discussions https://github.com/labstack/echo/discussions
Actions https://github.com/labstack/echo/actions
Projects https://github.com/labstack/echo/projects
Wiki https://github.com/labstack/echo/wiki
Security and quality https://github.com/labstack/echo/security
Insights https://github.com/labstack/echo/pulse
aldashttps://github.com/aldas
labstack:masterhttps://github.com/labstack/echo/tree/master
aldas:StaticDirectoryHandler_Router_path_variable_escapinghttps://github.com/aldas/echo/tree/StaticDirectoryHandler_Router_path_variable_escaping
Conversationhttps://github.com/labstack/echo/pull/3016
Commits8 (8)https://github.com/labstack/echo/pull/3016/commits
Checkshttps://github.com/labstack/echo/pull/3016/checks
Files changedhttps://github.com/labstack/echo/pull/3016/files
revert PR #3009 changes to just disabling path escaping by default in static methods/middlewarehttps://github.com/labstack/echo/pull/3016#top
aldashttps://github.com/aldas
labstack:masterhttps://github.com/labstack/echo/tree/master
aldas:StaticDirectoryHandler_Router_path_variable_escapinghttps://github.com/aldas/echo/tree/StaticDirectoryHandler_Router_path_variable_escaping
https://github.com/aldas
aldashttps://github.com/aldas
Jun 15, 2026https://github.com/labstack/echo/pull/3016#issue-4662052196
#3009https://github.com/labstack/echo/pull/3009
#3009https://github.com/labstack/echo/pull/3009
Please reload this pagehttps://github.com/labstack/echo/pull/3016
https://github.com/aldas
Fix Static Middleware and Router Inconsistent Escaping leading to pos…https://github.com/labstack/echo/pull/3016/commits/f6f4af7d173d31f02df685e3ba462297298a3e66
f6f4af7https://github.com/labstack/echo/pull/3016/commits/f6f4af7d173d31f02df685e3ba462297298a3e66
https://github.com/aldas
aldashttps://github.com/aldas
Jun 15, 2026 https://github.com/labstack/echo/pull/3016#ref-pullrequest-4662047210
fix(static): disable static path unescaping by default to prevent ACL bypass (GHSA-3pmx-cf9f-34xr) #3015 https://github.com/labstack/echo/pull/3015
aldashttps://github.com/aldas
June 15, 2026 07:51https://github.com/labstack/echo/pull/3016#commits-pushed-ba39ad4
https://github.com/aldas
fix filename Git can not create under Windowshttps://github.com/labstack/echo/pull/3016/commits/ba39ad486a6b93744fd8a2397f29322b2b30ee96
ba39ad4https://github.com/labstack/echo/pull/3016/commits/ba39ad486a6b93744fd8a2397f29322b2b30ee96
https://github.com/aldas
add missing filehttps://github.com/labstack/echo/pull/3016/commits/086005d578509f3b625481bcb19667972f504b3b
086005dhttps://github.com/labstack/echo/pull/3016/commits/086005d578509f3b625481bcb19667972f504b3b
https://github.com/apps/codecov
codecovhttps://github.com/apps/codecov
Jun 15, 2026https://github.com/labstack/echo/pull/3016#issuecomment-4704802855
Please reload this pagehttps://github.com/labstack/echo/pull/3016
Codecovhttps://app.codecov.io/gh/labstack/echo/pull/3016?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=labstack
01b45behttps://app.codecov.io/gh/labstack/echo/commit/01b45be8d112267ee2b94c86e2c57f02d1c4219e?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=labstack
b58df7chttps://app.codecov.io/gh/labstack/echo/commit/b58df7c7190ddb326a564faed6f1a0c79f54744e?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=labstack
☔ View full report in Codecov by Harnesshttps://app.codecov.io/gh/labstack/echo/pull/3016?dropdown=coverage&src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=labstack
Share it herehttps://about.codecov.io/codecov-pr-comment-feedback/?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=labstack
Test Analyticshttps://docs.codecov.com/docs/test-analytics
Please reload this pagehttps://github.com/labstack/echo/pull/3016
https://github.com/aldas
revert to path.Clean for FS pathhttps://github.com/labstack/echo/pull/3016/commits/acb33917890d178a5bc630d40a867fbbbb120b94
acb3391https://github.com/labstack/echo/pull/3016/commits/acb33917890d178a5bc630d40a867fbbbb120b94
https://github.com/vishr
vishrhttps://github.com/vishr
Jun 15, 2026 https://github.com/labstack/echo/pull/3016#pullrequestreview-4494718615
View reviewed changes https://github.com/labstack/echo/pull/3016/files/acb33917890d178a5bc630d40a867fbbbb120b94
vishrhttps://github.com/vishr
https://github.com/labstack/echo/pull/3016#pullrequestreview-4494718615
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
GHSA-vfp3-v2gw-7wfqhttps://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq
#3015https://github.com/labstack/echo/pull/3015
#3015https://github.com/labstack/echo/pull/3015
Please reload this pagehttps://github.com/labstack/echo/pull/3016
aldashttps://github.com/aldas
June 15, 2026 10:24https://github.com/labstack/echo/pull/3016#commits-pushed-687695b
https://github.com/aldas
revert StaticDirectoryHandler to redirect using unescaped path as bas…https://github.com/labstack/echo/pull/3016/commits/687695baaec73ecb8a133fb54f7a017be7f75e73
687695bhttps://github.com/labstack/echo/pull/3016/commits/687695baaec73ecb8a133fb54f7a017be7f75e73
https://github.com/aldas
fix Windows checking out files with using \r\n as end of lineshttps://github.com/labstack/echo/pull/3016/commits/c2a5ef6a7f1e0a28fd171c99b2141bd6e128f068
c2a5ef6https://github.com/labstack/echo/pull/3016/commits/c2a5ef6a7f1e0a28fd171c99b2141bd6e128f068
https://github.com/aldas
added tests for encoded dotshttps://github.com/labstack/echo/pull/3016/commits/99fcc1f98e0c2c96c807c30a8f6f010275f52d92
99fcc1fhttps://github.com/labstack/echo/pull/3016/commits/99fcc1f98e0c2c96c807c30a8f6f010275f52d92
https://github.com/aldas
aldashttps://github.com/aldas
Jun 15, 2026https://github.com/labstack/echo/pull/3016#issuecomment-4705763073
Please reload this pagehttps://github.com/labstack/echo/pull/3016
#3015https://github.com/labstack/echo/pull/3015
Please reload this pagehttps://github.com/labstack/echo/pull/3016
https://github.com/aldas
aldashttps://github.com/aldas
Jun 15, 2026https://github.com/labstack/echo/pull/3016#issuecomment-4705834681
Please reload this pagehttps://github.com/labstack/echo/pull/3016
@vishrhttps://github.com/vishr
Please reload this pagehttps://github.com/labstack/echo/pull/3016
https://github.com/aldas
add testcase and document StaticDirectoryHandler `disablePathUnescapi…https://github.com/labstack/echo/pull/3016/commits/b58df7c7190ddb326a564faed6f1a0c79f54744e
b58df7chttps://github.com/labstack/echo/pull/3016/commits/b58df7c7190ddb326a564faed6f1a0c79f54744e
https://github.com/aldas
aldashttps://github.com/aldas
Jun 15, 2026https://github.com/labstack/echo/pull/3016#issuecomment-4706604678
@vishrhttps://github.com/vishr
Please reload this pagehttps://github.com/labstack/echo/pull/3016
https://github.com/vishr
vishrhttps://github.com/vishr
Jun 15, 2026 https://github.com/labstack/echo/pull/3016#pullrequestreview-4498367387
View reviewed changes https://github.com/labstack/echo/pull/3016/files/b58df7c7190ddb326a564faed6f1a0c79f54744e
vishrhttps://github.com/vishr
https://github.com/labstack/echo/pull/3016#pullrequestreview-4498367387
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
#3015https://github.com/labstack/echo/pull/3015
#3015https://github.com/labstack/echo/pull/3015
Please reload this pagehttps://github.com/labstack/echo/pull/3016
https://github.com/aldas
aldashttps://github.com/aldas
Jun 15, 2026https://github.com/labstack/echo/pull/3016#issuecomment-4709150504
@vishrhttps://github.com/vishr
Please reload this pagehttps://github.com/labstack/echo/pull/3016
https://github.com/aldas
aldashttps://github.com/aldas
78c3d95https://github.com/labstack/echo/commit/78c3d9543be665b4bb9ed5ece3ac829108e3efa5
Jun 15, 2026https://github.com/labstack/echo/pull/3016#event-26769320566
Please reload this pagehttps://github.com/labstack/echo/pull/3016
https://github.com/aldas
aldashttps://github.com/aldas
Jun 15, 2026https://github.com/labstack/echo/pull/3016#issuecomment-4710487428
#2996https://github.com/labstack/echo/pull/2996
#2949https://github.com/labstack/echo/pull/2949
@vishrhttps://github.com/vishr
Please reload this pagehttps://github.com/labstack/echo/pull/3016
https://github.com/vishr
vishrhttps://github.com/vishr
Jun 15, 2026https://github.com/labstack/echo/pull/3016#issuecomment-4710630651
@aldashttps://github.com/aldas
#2996https://github.com/labstack/echo/pull/2996
#2949https://github.com/labstack/echo/pull/2949
https://echo.labstack.comhttps://echo.labstack.com
Please reload this pagehttps://github.com/labstack/echo/pull/3016
https://github.com/aldas
aldashttps://github.com/aldas
Jun 15, 2026 https://github.com/labstack/echo/pull/3016#ref-pullrequest-4667642853
backport PR 3016 from v5 to v4 #3019 https://github.com/labstack/echo/pull/3019
https://github.com/aldas
aldashttps://github.com/aldas
June 17, 2026 15:43https://github.com/labstack/echo/pull/3016#event-26869332714
https://github.co/hiddenchars
https://github.com/labstack/echo/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Flabstack%2Fecho%2Fpull%2F3016
https://github.com/vishr
vishr https://github.com/vishr
https://github.com/labstack/echo/pull/3016/files/b58df7c7190ddb326a564faed6f1a0c79f54744e
Please reload this pagehttps://github.com/labstack/echo/pull/3016
https://github.com/aldas
https://github.com/vishr
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.