alibaba / alibaba/Sentinel

建议修改bug

Open
#2,710 2 comments 0 reactions 0 assignees View on GitHub
area/integrations
Dominant language
Java
Stars
23.1k
Forks
8.1k
PR merge metrics
No merged PRs in 30d

Description

流控配置接口时的路径为: /test/java (这是正常情况下)

如果浏览器访问路径的格式 出现如下情况:
test/java
test//java
//test/java
//test/java////
等等,没有按照 字符串/test/java 一致,会出现无法 流控这个接口的BUG

上诉问题 对接口的安全问题 较大

Contributor guide

Open the contributing guide

Research direction

Start by locating the flow-control path-matching entry point and reproduce the reported requests against the normal /test/java path. Compare test/java, test//java, //test/java, and //test/java////, then verify that equivalent path forms receive the same flow-control behavior and add regression coverage if the project has a matching test area.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
backend, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.