Path normalization canaries
Compare harmless equivalent paths to find a proxy, cache, or router that interprets them differently. Never use this as an access-control bypass against data you do not own.
Tags: path, normalization, cache, authorized-testing
Controlled probes
/public/./health/public/%2e/healthCompare status, final route, cache headers, and canonical redirect only
Source: https://owasp.org/www-project-web-security-testing-guide/