Audit F2: the PDF placeholder was padded with underscores embedded directly in the /URI path, so Acrobat fetched /c/<id>____________ and the chi route extracted the padded id. Lookup returned ErrNotFound, the webbug fallback served a 1x1 GIF, and event recording skipped because tok was nil. PDF tokens silently never recorded events. Part B (durable): pad inside a ?p= query string so the trigger path stays canonical and chi extracts the real id. Part A (defense in depth): handler TrimRight on _ so PDFs already in the field also resolve correctly. Added two regression tests: byte-after-id assertion in the PDF artifact, and the handler's trim path. |
||
|---|---|---|
| .. | ||
| admin | ||
| config | ||
| core | ||
| event | ||
| geoip | ||
| health | ||
| middleware | ||
| notify | ||
| server | ||
| testutil | ||
| token | ||
| turnstile | ||