From f563b8139a66ad8b77a3ffa009d251a94651e875 Mon Sep 17 00:00:00 2001 From: Jackie Elliott <64559656+jaellio@users.noreply.github.com> Date: Wed, 24 Apr 2024 13:24:23 -0700 Subject: [PATCH] Clarify use of path template operators with MERGE_SLASHES (#14954) Follow up to https://github.com/istio/istio/pull/50365#discussion_r1571343731 Signed-off-by: Jackie Elliott --- .../en/docs/reference/config/security/normalization/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/docs/reference/config/security/normalization/index.md b/content/en/docs/reference/config/security/normalization/index.md index 64f1823b73..6dabeb1d4e 100644 --- a/content/en/docs/reference/config/security/normalization/index.md +++ b/content/en/docs/reference/config/security/normalization/index.md @@ -46,7 +46,7 @@ This is enabled by default with the normalization option `BASE`. Istio will merge multiple forward slashes to a single forward slash (`/`). For example, the request with path `/some//data///abc` will be normalized to `/some/data/abc`. -This is disabled by default but can be enabled with the normalization option `MERGE_SLASHES`. +This is disabled by default but can be enabled with the normalization option `MERGE_SLASHES`. If enabled, the path may not match a path with the path template operator `{**}`. For example, once `MERGE_SLASHES` is enabled, `/some/data//abc` will no longer match `/some/data/{**}/abc` since the path will be normalized to `/some/data/abc`. ### 4. Single dot and double dots (`/./`, `/../`)