#path-normalization

Authentication bypass via inconsistent path normalization

A walkthrough of how mismatched path handling between a proxy and an application can bypass authentication controls, and how to prevent it.