kshitijshresth b136bd2246 Escape regex metacharacters in PATH rule wildcard matching ...

isValidUrlGlobPattern accepts characters like ( ) [ ] { } | . + ^ $ in PATH rule values, but isPathAllowed converted wildcard segments to regex without escaping them. A rule value such as /(api* produced an invalid regex and threw on every request to the resource, surfacing as a 500 from verifySession. Literal characters like . and + also changed matching semantics. isPathAllowed is extracted to server/lib/pathMatch.ts as a pure module, metacharacters are escaped before wildcard substitution, compiled segment regexes are cached, and the test suite now imports the real implementation instead of a stale copy, with added coverage for special characters.

2026-06-12 11:21:21 +03:00

..

alerts

Fix public resource health with unknown WireGuard targets

2026-05-20 09:05:05 +05:30

billing

Update tiers

2026-06-10 16:27:25 -07:00

blueprints

Use ssh like mode host

2026-06-11 11:11:50 -07:00

exitNodes

…

idp

…

openapi

Add concrete OpenAPI data schemas for selected routes

2026-05-17 21:25:53 +00:00

traefik

Fix http resources not being pulled

2026-06-04 15:36:25 -07:00

acmeCertSync.ts

Sync acme certs into the database

2026-04-09 15:38:36 -04:00

asn.ts

…

cache.ts

Fix cache import to be dynamic

2026-05-21 14:43:50 -07:00

calculateUserClientsForOrgs.ts

Properly lock the ip selection through writes to db

2026-05-27 21:08:45 -07:00

canUserAccessResource.ts

…

certificates.ts

Fix cert vars issue in stub

2026-04-21 21:48:54 -07:00

checkOrgAccessPolicy.ts

…

cleanupLogs.test.ts

…

cleanupLogs.ts

make private

2026-03-23 17:23:51 -07:00

clientVersionChecks.ts

Add message compression for large messages

2026-03-13 11:46:03 -07:00

colorsSchema.ts

…

config.ts

…

consts.ts

Bump version

2026-05-29 17:12:26 -07:00

corsWithLoginPage.ts

…

crypto.ts

…

deleteOrg.ts

Add some logging to debug

2026-03-10 14:24:57 -07:00

domainUtils.ts

Adding guiderails

2026-04-23 18:02:32 -07:00

geoip.ts

…

getEnvOrYaml.ts

…

hostMeta.ts

…

ip.test.ts

…

ip.ts

Use ssh like mode host

2026-06-11 11:11:50 -07:00

isLicencedOrSubscribed.ts

…

isSubscribed.ts

…

lock.ts

…

logAccessAudit.ts

…

normalizePostAuthPath.ts

Update year

2026-04-15 14:41:13 -07:00

pathMatch.ts

Escape regex metacharacters in PATH rule wildcard matching

2026-06-12 11:21:21 +03:00

rateLimitStore.ts

…

readConfigFile.ts

Support overriding badger for testing

2026-03-28 21:24:13 -07:00

rebuildClientAssociations.ts

Merge branch 'rdp-ssh' into dev

2026-05-28 13:59:14 -07:00

requestParams.ts

Merge pull request #3085 from marcschaeferger-org/security-updates

2026-05-28 11:54:23 -07:00

response.ts

…

s3.ts

…

sanitize.ts

Update year

2026-04-15 14:41:13 -07:00

schemas.ts

Pass one at getting it into the db

2026-04-23 14:05:08 -07:00

serverIpService.ts

…

sshCA.ts

…

statusHistory.ts

Fix cache import to be dynamic

2026-05-21 14:43:50 -07:00

stoi.ts

…

telemetry.ts

Use ssh like mode host

2026-06-11 11:11:50 -07:00

tokenCache.ts

Update year

2026-04-15 14:41:13 -07:00

totp.ts

…

userOrg.ts

support multi role on create user and invites

2026-03-29 12:11:22 -07:00

userOrgRoles.ts

Handle the roles better in the verify session

2026-03-28 21:24:13 -07:00

validators.test.ts

fix: make validators test failures exit non-zero

2026-05-07 20:13:56 +04:00

validators.ts

policies and policy on resource structure in a good place

2026-06-07 12:19:33 -07:00