Repository navigation
docs: HaRP 0.4.8 path checks and the refused paths - #22
Merged
Merged
Conversation
oleksandr-nc
force-pushed
the
docs/route-paths
branch
2 times, most recently
from
October 30, 2026 11:23
8935189 to
3a09ebc
Compare
Signed-off-by: Oleksandr Piskun <oleksandr2088@icloud.com>
oleksandr-nc
force-pushed
the
docs/route-paths
branch
from
October 30, 2026 11:39
3a09ebc to
33b6c6e
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
HaRP 0.4.8 (nextcloud/HaRP#152) decides routes on the decoded path and applies the highest access level the path reaches when read another way, and drops the lifecycle endpoints in any spelling and paths with
.or..segments. The ExApp proxy refuses the same paths with404since nextcloud/app_api#1163 and #1168. With the final nextcloud/app_api#1149 the version check caches a current HaRP version for a week and only a too-old one for an hour.Changes
exapp-contract.md:urlis matched against the decoded path and starts with/or^/, the path readings on HaRP, the dropped and refused paths on both proxies, a directory route written as^/img(/.*)?$, and that HaRP keeps the routes it loaded until it restarts.harp-operations.mdandSKILL.md:502for requests HaRP drops, a banned client IP included (a timeout across networks), a troubleshooting row for a403caused by the verb or another reading of the path, and the version check cache.harp-operations.md,harp-triage.sh,operations.mdandtests/verify.py: a502or a timeout on the public/exapps/app_api/infoprobe can also be a ban, and unsigned probes count toward it; the triage script lists ban and dot-segment log lines; the probe example shows 0.4.8.