feat: Support URL wildcards on extraRoutes - #96

Merged

thced merged 14 commits into

feat/extras-wildcard

May 22, 2026

Commits on May 22, 2026

docs: Add extras wildcard matching design
thced
committed
2f1bb9f
docs: Add path-traversal protection to extras wildcard design
thced
committed
f935536
docs: Harden extras path-traversal protection (raw+decoded checks)
thced
committed
e9f2509
docs: Add extras wildcard implementation plan
thced
committed
07490a3
feat: Add PathPattern for extras wildcard matching
thced
committed
04ce19a
docs: Document extras wildcard syntax in README
thced
committed
e227af4
docs: Clarify mid-path vs trailing ** semantics in extras spec
thced
committed
49632af
feat: Add ExtrasPathValidator for traversal protection
thced
committed
75e8b59
fix: Use URI.getPath() in ExtrasPathValidator; remove duplicate test
thced
committed
d25b35e
feat: Add ExtrasRouter with exact and wildcard matching
thced
committed
67d38d3
feat: Replace per-route extras wiring with ExtrasRouter
thced
committed
378add9
test: Add integration tests for extras wildcard matching
thced
committed
5f1cb9e
test: Use HTTP_NO_CONTENT and add single-dot traversal vector to ExtrasWildcardIT
thced
committed
a8fd01b
refactor: Reduce cognitive complexity in path validation; drop dead IT comments
thced
committed
ff33d15