Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: cloudflare/web-bot-auth
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: cloudflare/web-bot-auth
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: fix_normalization
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 1 commit
  • 5 files changed
  • 1 contributor

Commits on Sep 18, 2025

  1. Enforce normalization rules during signing 

    For the authority, path, and scheme components, RFC 9421 requires that

> Characters other than those in the "reserved" set are equivalent to
> their percent-encoded octets: the normal form is to not encode them.

This implies that we need to ensure we perform percent decoding to arrive
at the normal form, ensuring that percent-encoded URLs and their
non-encoded forms are treated as equivalent.
    @AkshatM
    AkshatM committed Sep 18, 2025
    Configuration menu
    Copy the full SHA
    adf181c View commit details
    Browse the repository at this point in the history
Loading