Merge b7dd5120ef35e1ed60c497d770495aa3054e6ab1 into 3ab698dc5110af1977d57226e4995c57dd34c233

add open redirect test case
https://github.com/gin-gonic/gin/pull/3907
2026-06-13 00:59:29 +08:00 · 2026-01-17 19:17:50 +08:00 · 2024-04-01 14:52:28 +08:00 · 2024-04-01 14:50:18 +08:00 · 2024-03-28 23:05:09 +08:00
2 changed files with 7 additions and 1 deletions
--- a/gin.go
+++ b/gin.go
@ -788,6 +788,7 @@ func redirectTrailingSlash(c *Context) {
 		p = prefix + "/" + req.URL.Path
 	}
 	req.URL.Path = p + "/"
+	p = regexp.MustCompile("^/{2,}").ReplaceAllString(p, "/")
 	if length := len(p); length > 1 && p[length-1] == '/' {
 		req.URL.Path = p[:length-1]
 	}
--- a/routes_test.go
+++ b/routes_test.go
@ -150,8 +150,13 @@ func TestRouteRedirectTrailingSlash(t *testing.T) {
 	router.GET("/path2/", func(c *Context) {})
 	router.POST("/path3", func(c *Context) {})
 	router.PUT("/path4/", func(c *Context) {})
+	router.GET("/:param1/:param2", func(c *Context) {})

-	w := PerformRequest(router, http.MethodGet, "/path/")
+	w := PerformRequest(router, http.MethodGet, "//path/")
+	assert.Equal(t, "/path", w.Header().Get("Location"))
+	assert.Equal(t, http.StatusMovedPermanently, w.Code)
+
+	w = PerformRequest(router, http.MethodGet, "/path/")
 	assert.Equal(t, "/path", w.Header().Get("Location"))
 	assert.Equal(t, http.StatusMovedPermanently, w.Code)
Author	SHA1	Message	Date
cyal1	dc2c7e91e6	Merge b7dd5120ef35e1ed60c497d770495aa3054e6ab1 into 3ab698dc5110af1977d57226e4995c57dd34c233	2026-01-17 19:17:50 +08:00
cyal1	b7dd5120ef	add open redirect test case https://github.com/gin-gonic/gin/pull/3907	2024-04-01 14:52:28 +08:00
cyal1	29db90e1fc	fixed open redirect	2024-04-01 14:50:18 +08:00
cyal1	6c8ec4deda	fixed open redirect	2024-03-28 23:05:09 +08:00