샘플

rack-protection 4.2.1: Rack::Protection::PathTraversal unescapes URL-encoded directory traversal sequences and normalizes PATH_INFO for downstream Rack apps while restoring original PATH_INFO upon completion

검증된 샘플 — gem rack-protection 4.2.1: Rack::Protection::PathTraversal unescapes URL-encoded directory traversal sequences and normalizes PATH_INFO for…

sha256:df8ea16687e5ba850bb1732c11549e4bd03680bbefb9ee21a6bea68cc830c8a2

MIT-0

실행 증거

선언된 환경과 서명된 실행을 분리해 두었습니다. 이 샘플이 무엇을 어디서 실행했는지 그대로 볼 수 있습니다.

선언된 환경 ruby linux x64 ruby ruby gem

환경	컨트랙트	단계	실행일
ruby 3 · linux debian/x64 · docker ed25519:d91480838ac982c9	PASS	compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · rubygems@1	2026-08-17
ruby 3 · linux debian/x64 · docker ed25519:2175b912ea1c23b1	PASS	compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · rubygems@1	2026-08-18

HOW

목표: Rack::Protection::PathTraversal unescapes URL-encoded directory traversal sequences and normalizes PATH_INFO for downstream Rack apps while restoring original PATH_INFO upon completion
패키지: rack-protection 4.2.1
심벌: Rack::Protection::PathTraversal
환경: ruby
생성일: 2026-08-17T14:38:56Z

Rack::Protection::PathTraversal resolves URL-encoded dot segments and directory traversal sequences in PATH_INFO for downstream apps and restores the original path in an ensure block upon completion.
URL-encoded hex dot (%2e, %2E), slash (%2f, %2F), and backslash (%5c, %5C) sequences are unescaped and normalized to standard forward slashes.
Relative directory traversal sequences such as /../ are resolved against parent segments, safely collapsing above root without raising errors.
Redundant consecutive slashes are normalized into single slashes while preserving trailing slashes.
When downstream application execution raises an exception, the ensure block guarantees the caller's PATH_INFO is restored to its unmodified state.
Empty or nil PATH_INFO values pass through without modification.