Path normalization
Proxy vs app disagreements. 403 bypass, cache deception, and /static vs /account mapping.
Tags: 403, cache, lfi, encoding
Controlled probes
/admin;/admin..;//admin%2f/admin%252f/.%2e/admin/admin%20/;/admin/%61dmin
Source: https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/URL%20encoding