static: harden dot-segment check for backslashes, test non-validating custom fs.FS - #3129

Merged

vishr merged 3 commits into

fix/static-comment-and-custom-fs-test

Sep 29, 2026

Commits on Sep 29, 2026

static: test that a non-validating custom fs.FS cannot escape its root, fix comment
vishr
committed
8c86ed9
static: reject backslash dot segments, cover unescaping and group routes in tests
vishr
committed
865e5ac
static: test backslash hardening on every OS, add default-config vectors, fix comments
vishr
committed
b123cc4