fix(proxy): match route URL against request path including leading slash (HaRP alignment)

oleksandr-nc · backportbot[bot] · commit 5d3ed63e46ad · 2026-05-15T13:36:50.000Z
Signed-off-by: Oleksander Piskun &lt;oleksandr2088@icloud.com&gt;
diff --git a/lib/Controller/ExAppProxyController.php b/lib/Controller/ExAppProxyController.php
@@ -317,6 +317,8 @@ private function buildMultipartFormData(array $bodyParams, array $files): array
 	}
 
 	private function passesExAppProxyRoutesChecks(ExApp $exApp, string $exAppRoute): array {
+		// Route URL is a regex matched against the request path including its leading slash, mirroring HaRP's target_path semantics.
+		$exAppRoute = '/' . $exAppRoute;
 		foreach ($exApp->getRoutes() as $route) {
 			$pattern = '~^(?:' . str_replace('~', '\\~', $route['url']) . ')~i';
 			if (preg_match($pattern, $exAppRoute) === 1

Original file line number	Diff line number	Diff line change
`@@ -317,6 +317,8 @@ private function buildMultipartFormData(array $bodyParams, array $files): array`
`317`	`317`	`}`
`318`	`318`
`319`	`319`	`private function passesExAppProxyRoutesChecks(ExApp $exApp, string $exAppRoute): array {`
	`320`	`+ // Route URL is a regex matched against the request path including its leading slash, mirroring HaRP's target_path semantics.`
	`321`	`+ $exAppRoute = '/' . $exAppRoute;`
`320`	`322`	`foreach ($exApp->getRoutes() as $route) {`
`321`	`323`	`$pattern = '~^(?:' . str_replace('~', '\\~', $route['url']) . ')~i';`
`322`	`324`	`if (preg_match($pattern, $exAppRoute) === 1`