• Matthew Holt's avatar
    Change CASE_SENSITIVE_PATH default to false · b0d9c058
    Matthew Holt authored
    A default of true is risky when protecting assets by matching base path.
    It's not obvious that protecting /foo/ will allow /Foo/ through, and if
    accessing static files on a case-insensitive file system... that's no
    good. So the default is now to be case-INsensitive when matching paths.
    b0d9c058
middleware.go 7.38 KB