mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-21 10:43:36 +00:00
rcourtman
81f96537e2
- Strip trailing slash from PULSE_URL in install script to prevent double-slash URLs - Add path normalization in router for defense-in-depth on public endpoint matching - Fixes issue #528 where users copying URLs with trailing slashes got 401 errors The install script now normalizes PULSE_URL with ${PULSE_URL%/} before concatenating with /download/pulse-docker-agent, preventing https://example.com//download URLs. The router normalization provides additional resilience for path matching, though the existing path traversal check already blocks double slashes at ServeHTTP level.