Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: labstack/echo
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 68aaf3a
Choose a base ref
...
head repository: labstack/echo
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: b1d4430
Choose a head ref
  • 5 commits
  • 18 files changed
  • 1 contributor

Commits on Feb 2, 2026

  1. Fill c.Request().Pattern field with route path to help standard libra… 

    …ry based middlewares.
    @aldas
    aldas committed Feb 2, 2026
    Configuration menu
    Copy the full SHA
    09ccfba View commit details
    Browse the repository at this point in the history

Commits on Feb 6, 2026

  1. Fix directory traversal vulnerability under Windows in Static middlew… 

    …are when default Echo filesytem is used (effectively `middleware.StaticConfig{Filesystem: nil}`)
    @aldas
    aldas committed Feb 6, 2026
    Configuration menu
    Copy the full SHA
    88d975a View commit details
    Browse the repository at this point in the history

  2. Fix directory traversal vulnerability under Windows in Static middlew… 

    …are when default Echo filesytem is used (effectively `middleware.StaticConfig{Filesystem: nil}`)
    @aldas
    aldas committed Feb 6, 2026
    Configuration menu
    Copy the full SHA
    6c16259 View commit details
    Browse the repository at this point in the history

  3. Fix test reporting different size due Windows / Linux line ending inc… 

    …onsistencies
    @aldas
    aldas committed Feb 6, 2026
    Configuration menu
    Copy the full SHA
    48f25a6 View commit details
    Browse the repository at this point in the history

  4. Merge pull request #2891 from aldas/fix_staticmw 

    Fix directory traversal vulnerability under Windows in Static middleware when default Echo filesystem is used. Reported by @shblue21.

This applies to cases when:
- Windows is used as OS
- `middleware.StaticConfig.Filesystem` is `nil` (default)
- `echo.Filesystem` is has not been set explicitly (default)

Exposure is restricted to the active process working directory and its subfolders.
    @aldas
    aldas authored Feb 6, 2026
    Configuration menu
    Copy the full SHA
    b1d4430 View commit details
    Browse the repository at this point in the history
Loading