Merge 96c0fc516d8698e72be715a35d4ffc352870cd0c into ecb3f7b5e2f3915bf1db240ed5eee572f8dbea36

Merge branch 'master' into fix-unescape
chore(deps): upgrade golang.org/x/crypto to v0.45.0 (#4449 )
2026-07-07 19:21:13 +08:00 · 2025-11-23 12:21:41 +08:00 · 2025-11-23 12:21:38 +08:00 · 2025-11-23 11:46:13 +08:00 · 2024-08-21 09:45:05 +08:00 · 2024-08-20 18:12:40 +08:00
4 changed files with 6 additions and 6 deletions
--- a/gin.go
+++ b/gin.go
@ -689,8 +689,8 @@ func (engine *Engine) handleHTTPRequest(c *Context) {
 	httpMethod := c.Request.Method
 	rPath := c.Request.URL.Path
 	unescape := false
-	if engine.UseRawPath && len(c.Request.URL.RawPath) > 0 {
-		rPath = c.Request.URL.RawPath
+	if engine.UseRawPath {
+		rPath = c.Request.URL.EscapedPath()
 		unescape = engine.UnescapePathValues
 	}

--- a/go.mod
+++ b/go.mod
@ -35,7 +35,7 @@ require (
 	github.com/quic-go/qpack v0.5.1 // indirect
 	github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
 	golang.org/x/arch v0.20.0 // indirect
-	golang.org/x/crypto v0.44.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 	golang.org/x/text v0.31.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
--- a/go.sum
+++ b/go.sum
@ -74,8 +74,8 @@ go.uber.org/mock v0.5.2 h1:LbtPTcP8A5k9WPXj54PPPbjcI4Y6lhyOZXn+VS7wNko=
 go.uber.org/mock v0.5.2/go.mod h1:wLlUxC2vVTPTaE3UD51E0BGOAElKrILxhVSDYQLld5o=
 golang.org/x/arch v0.20.0 h1:dx1zTU0MAE98U+TQ8BLl7XsJbgze2WnNKF/8tGp/Q6c=
 golang.org/x/arch v0.20.0/go.mod h1:bdwinDaKcfZUGpH09BB7ZmOfhalA8lQdzl62l8gGWsk=
-golang.org/x/crypto v0.44.0 h1:A97SsFvM3AIwEEmTBiaxPPTYpDC47w720rdiiUvgoAU=
-golang.org/x/crypto v0.44.0/go.mod h1:013i+Nw79BMiQiMsOPcVCB5ZIJbYkerPrGnOa00tvmc=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
--- a/logger.go
+++ b/logger.go
@ -270,7 +270,7 @@ func LoggerWithConfig(conf LoggerConfig) HandlerFunc {
 	return func(c *Context) {
 		// Start timer
 		start := time.Now()
-		path := c.Request.URL.Path
+		path := c.Request.URL.EscapedPath()
 		raw := c.Request.URL.RawQuery

 		// Process request
Author	SHA1	Message	Date
Jim Chen	5622ff9da4	Merge 96c0fc516d8698e72be715a35d4ffc352870cd0c into ecb3f7b5e2f3915bf1db240ed5eee572f8dbea36	2025-11-23 12:21:41 +08:00
Bo-Yi Wu	96c0fc516d	Merge branch 'master' into fix-unescape	2025-11-23 12:21:38 +08:00
Bo-Yi Wu	ecb3f7b5e2	chore(deps): upgrade golang.org/x/crypto to v0.45.0 (#4449 ) - Update golang.org/x/crypto dependency to version 0.45.0 1. https://avd.aquasec.com/nvd/cve-2025-47914 2. https://avd.aquasec.com/nvd/cve-2025-58181 Signed-off-by: appleboy <appleboy.tw@gmail.com>	2025-11-23 11:46:13 +08:00
jimchen	6c7a318468	fix: fix URL path value still unescaped when UnescapePathValues set false	2024-08-21 09:45:05 +08:00
jimchen	bf6728e53b	fix: fix URL path value still unescaped when UnescapePathValues set false Closes #4033	2024-08-20 18:12:40 +08:00