Merge b7dd5120ef35e1ed60c497d770495aa3054e6ab1 into e88fc8927a52b74f55bec0351604a56ac0aa1c51

add open redirect test case
https://github.com/gin-gonic/gin/pull/3907
2026-07-09 12:12:37 +08:00 · 2025-11-18 23:29:53 +08:00 · 2024-04-01 14:52:28 +08:00 · 2024-04-01 14:50:18 +08:00 · 2024-03-28 23:05:09 +08:00
2 changed files with 7 additions and 1 deletions
--- a/gin.go
+++ b/gin.go
@ -782,6 +782,7 @@ func redirectTrailingSlash(c *Context) {
 		p = prefix + "/" + req.URL.Path
 	}
 	req.URL.Path = p + "/"
+	p = regexp.MustCompile("^/{2,}").ReplaceAllString(p, "/")
 	if length := len(p); length > 1 && p[length-1] == '/' {
 		req.URL.Path = p[:length-1]
 	}
--- a/routes_test.go
+++ b/routes_test.go
@ -150,8 +150,13 @@ func TestRouteRedirectTrailingSlash(t *testing.T) {
 	router.GET("/path2/", func(c *Context) {})
 	router.POST("/path3", func(c *Context) {})
 	router.PUT("/path4/", func(c *Context) {})
+	router.GET("/:param1/:param2", func(c *Context) {})

-	w := PerformRequest(router, http.MethodGet, "/path/")
+	w := PerformRequest(router, http.MethodGet, "//path/")
+	assert.Equal(t, "/path", w.Header().Get("Location"))
+	assert.Equal(t, http.StatusMovedPermanently, w.Code)
+
+	w = PerformRequest(router, http.MethodGet, "/path/")
 	assert.Equal(t, "/path", w.Header().Get("Location"))
 	assert.Equal(t, http.StatusMovedPermanently, w.Code)
Author	SHA1	Message	Date
cyal1	89dda5e215	Merge b7dd5120ef35e1ed60c497d770495aa3054e6ab1 into e88fc8927a52b74f55bec0351604a56ac0aa1c51	2025-11-18 23:29:53 +08:00
cyal1	b7dd5120ef	add open redirect test case https://github.com/gin-gonic/gin/pull/3907	2024-04-01 14:52:28 +08:00
cyal1	29db90e1fc	fixed open redirect	2024-04-01 14:50:18 +08:00
cyal1	6c8ec4deda	fixed open redirect	2024-03-28 23:05:09 +08:00