Comparing changes

…mpressible types (#1151)

…Proxies (#1111) Replace the counting prose and ASCII diagram with a recipe table mapping common deployments to numTrustedProxies values, plus a "verify with a known IP" step. Steer users toward ClientIPFromXFF with explicit CIDRs (added pointers to CDN-published IP lists from Cloudflare, AWS, Fastly, GCP) since CIDR-based trust cannot off-by-one. Add one fail-closed test case. Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>

…1148) * fix: don't drop handlers that collide with a Mount()/Route() pattern Mount() (and Route(), which is sugar for it) registers a synthetic "stub" handler on its exact mount pattern to connect it to the subrouter. node.routes() used that stub as a signal to hide the whole node from Routes()/Walk() — but if a real handler was also registered on that same pattern (e.g. r.Get("/bar", h) next to r.Route("/bar", ...)), it got hidden too, even though the route is perfectly routable. routes() now compares each handler against the stub by identity (sameHandler, using reflection since http.HandlerFunc isn't == comparable) and only hides the stub itself, keeping any real handler that shares the node. The "*" slot is only filtered on leaf nodes, since Walk() also reads Handlers["*"] to detect a *ChainHandler and propagate With() middleware into a subrouter — that entry has to survive even when it's the same value as the stub. Fixes #830. Also adds a regression test for #750 (middlewares registered on a Group not reaching handlers on a Route() mounted inside it), which turns out to already be fixed on master — this just locks it in. * Trim comments in routes() to just the why * Rename sameHandler to equalHandlers; narrow the reflect switch to Func Chan, Pointer, and UnsafePointer are already == comparable in Go — only Func, Map, and Slice aren't, and Map/Slice identity was never a real case here (the stub is always http.HandlerFunc or *ChainHandler). * Explain why Routes() reports /api/* and not /api/{id} in TestRoutesHidesMountStub * Trim comment in TestRoutesHidesMountStub

…1156) NewCompressor(level, "/*") passed validation but stored an empty wildcard key that never matched any Content-Type, silently compressing nothing. Instead of turning it into a compress-everything catch-all, reject both "/*" and "*/*" at construction: compressing every response wastes CPU on already-compressed types (zip, jpeg, png), which is why the middleware keeps a curated default list. Users should pass explicit content types.

Navigation Menu

Uh oh!

Uh oh!

Comparing changes

Open a pull request

Commits on Aug 20, 2026

This comparison is taking too long to generate.

Uh oh!