Path Normalization Canaries
Non-destructive path variants for identifying disagreement among CDN, proxy, framework router, cache, and origin. Compare every variant with a known route and a randomized nonexistent route.
Use as a detection primitive
Non-destructive path variants for identifying disagreement among CDN, proxy, framework router, cache, and origin. Compare every variant with a known route and a randomized nonexistent route.
Identify the parser, sink, encoding, and expected non-vulnerable behavior before choosing a sample. Prefer non-destructive markers.
Recorded payloads
Confirm the sink and encoding context before use.
/known/./route- Expected signal
- Not verified for this generic template. Confirm the exact tool version and expected output in its official documentation before use.
- Negative control
- Define a known-safe or nonexistent target that should produce a meaningfully different result.
- Effect and bounds
- Unknown until flags and target are reviewed. Assume the command sends traffic or changes local state unless the tool documentation proves otherwise.
Confirm the sink and encoding context before use.
/known/../known/route- Expected signal
- Not verified for this generic template. Confirm the exact tool version and expected output in its official documentation before use.
- Negative control
- Define a known-safe or nonexistent target that should produce a meaningfully different result.
- Effect and bounds
- Unknown until flags and target are reviewed. Assume the command sends traffic or changes local state unless the tool documentation proves otherwise.
Confirm the sink and encoding context before use.
/known//route- Expected signal
- Not verified for this generic template. Confirm the exact tool version and expected output in its official documentation before use.
- Negative control
- Define a known-safe or nonexistent target that should produce a meaningfully different result.
- Effect and bounds
- Unknown until flags and target are reviewed. Assume the command sends traffic or changes local state unless the tool documentation proves otherwise.
Confirm the sink and encoding context before use.
/known/%2e/route- Expected signal
- Not verified for this generic template. Confirm the exact tool version and expected output in its official documentation before use.
- Negative control
- Define a known-safe or nonexistent target that should produce a meaningfully different result.
- Effect and bounds
- Unknown until flags and target are reviewed. Assume the command sends traffic or changes local state unless the tool documentation proves otherwise.
Confirm the sink and encoding context before use.
/known/route;control- Expected signal
- Not verified for this generic template. Confirm the exact tool version and expected output in its official documentation before use.
- Negative control
- Define a known-safe or nonexistent target that should produce a meaningfully different result.
- Effect and bounds
- Unknown until flags and target are reviewed. Assume the command sends traffic or changes local state unless the tool documentation proves otherwise.
Confirm the sink and encoding context before use.
/known/route%3fcontrol- Expected signal
- Not verified for this generic template. Confirm the exact tool version and expected output in its official documentation before use.
- Negative control
- Define a known-safe or nonexistent target that should produce a meaningfully different result.
- Effect and bounds
- Unknown until flags and target are reviewed. Assume the command sends traffic or changes local state unless the tool documentation proves otherwise.
Attribution
Version history: normalized permanent page created 2026-08-20.