fileserver: Don't replace in request paths (fix #4027)

caddyserver · Mar 1, 2021 · 5bf0a55 · 5bf0a55
1 parent ec309c6
commit 5bf0a55
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/modules/caddyhttp/fileserver/staticfiles.go b/modules/caddyhttp/fileserver/staticfiles.go
@@ -138,12 +138,11 @@ func (fsrv *FileServer) ServeHTTP(w http.ResponseWriter, r *http.Request, next c
 	filesToHide := fsrv.transformHidePaths(repl)
 
 	root := repl.ReplaceAll(fsrv.Root, ".")
-	suffix := repl.ReplaceAll(r.URL.Path, "")
-	filename := sanitizedPathJoin(root, suffix)
+	filename := sanitizedPathJoin(root, r.URL.Path)
 
 	fsrv.logger.Debug("sanitized path join",
 		zap.String("site_root", root),
-		zap.String("request_path", suffix),
+		zap.String("request_path", r.URL.Path),
 		zap.String("result", filename))
 
 	// get information about the file