umputun / reproxy / 41180050222

81%

push

github

fix: match host names case-insensitively and static prefixes on escaped paths (#270)

* fix: match hosts case-insensitively and static prefixes on escaped paths

exact host lookup was case-sensitive, so ADMIN.example.com could skip an
admin.example.com rule with an allowlist and match a broader wildcard or
regex rule for the same upstream. A server that
equals the host ignoring case now wins before any wildcard or regex server,
and the *.example.com suffix check ignores case. Regex servers and the host
passed to $host are unchanged.

static routes compared the escaped request path with the plain assets root,
so a protected "/private docs/" route never matched /private%20docs/x and a
broader route served the file. The root is now escaped before the comparison;
file serving still uses the plain root.

README notes cover host case, escaped route paths, (?i) for case-insensitive
upstreams, and reading X-Forwarded-For from the right.

* fix: treat a trailing dot in host and server names as the same host

host lookup did not treat `admin.example.com` and `admin.example.com.` as
equivalent. A dotted request could lose exact-rule precedence to another
regex, while a dotted config key could send the plain spelling to a
catch-all. Either could bypass the intended rule's auth or allowlist when the
broader rule reached the same backend. Exact and *.example.com server names
now ignore one trailing dot on either side. Regex servers are unchanged.

11 of 11 new or added lines in 1 file covered. (100.0%)

2615 of 3229 relevant lines covered (80.98%)

78.16 hits per line