https://bareproxy.com/tags/security/ Recent content in Security on BareProxy.com Hugo en-us Sun, 27 Sep 2026 00:00:00 +0000 https://bareproxy.com/why-bareproxy-routes-on-the-same-path-it-forwards/ Sun, 27 Sep 2026 00:00:00 +0000 https://bareproxy.com/why-bareproxy-routes-on-the-same-path-it-forwards/ <p>Many proxy bypasses share one cause: the proxy reads a path one way and the application reads it another. A rule that blocks <code>/admin/</code> does nothing if the request arrives as <code>/api/%2e%2e/admin</code> and the application decodes it after the proxy has let it through.</p> <p>BareProxy normalizes every path once. It decodes escapes of plain characters, resolves <code>.</code> and <code>..</code> segments, and merges runs of slashes. Then it routes on that form and sends the backend exactly the same form. Encoded slashes and backslashes are refused unless a site opts in.</p>