Enum PathNormalizeTechnique 

pub enum PathNormalizeTechnique {
    DotSegmentEncoded,
    DoubleEncodedDotSegment,
    MixedDotEncoding,
    BackslashTraversal,
    NullByteTruncation,
    MultiSlashCollapse,
    FragmentLeak,
    SemicolonPathParam,
    UnicodeFullwidthSlash,
    OverlongUtf8Slash,
}

Which path-normalization differential to emit. Each variant maps to a known WAF/origin disagreement on URL-path interpretation.

Variants

DotSegmentEncoded

/safe/%2e%2e/<target> — URL-encoded dot-dot traversal. Bypasses WAFs that scan only for literal ../.

DoubleEncodedDotSegment

/safe/%252e%252e/<target> — double-encoded dot-dot. Bypasses single-decode WAFs that see literal %25....

MixedDotEncoding

/safe/%2e./<target> — mixed encoded + literal dot. Bypasses one-pass normalizers that miss the hybrid form.

BackslashTraversal

/safe/..\<target> — Windows-style backslash separator. IIS / some Tomcat treat \ as a path separator; many WAFs normalize only forward slashes.

NullByteTruncation

/<target>%00/safe.html — NUL-byte truncation. C-string-based filters truncate at NUL; URL-aware backends keep the full path and route to /<target>.

MultiSlashCollapse

////<target> — multi-slash run. Some proxies collapse, some don’t — a per-segment ACL gate that counts segments by literal slash will undercount.

FragmentLeak

/safe#/<target> — fragment-leaked path. Backends strip fragment before routing; some WAFs split before normalization and see only /safe.

SemicolonPathParam

/<target>;jsessionid=evil — RFC 3986 path parameter suffix. Some WAFs normalize the path-param suffix away (matching /<target>) while others keep it and miss the gate.

UnicodeFullwidthSlash

/<U+FF0F><target> — fullwidth solidus (visually a /). Backends that NFKC-normalize the URL see /admin; WAFs that don’t see a 3-byte UTF-8 sequence and pass.

OverlongUtf8Slash

/%c0%af<target> — overlong UTF-8 encoding of /. Forbidden by RFC 3629 but accepted by lenient parsers (pre-2.2.x Apache, old IIS, some Tomcat versions).

Implementations

impl PathNormalizeTechnique

pub fn technique_name(&self) -> &'static str

Stable kebab-case technique name. Used in JSON output and telemetry — operators key on this for reproducibility.

pub fn description(&self) -> &'static str

One-line operator description for logs and reports.

Trait Implementations

impl Clone for PathNormalizeTechnique

fn clone(&self) -> PathNormalizeTechnique

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for PathNormalizeTechnique

impl Debug for PathNormalizeTechnique

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for PathNormalizeTechnique

impl Hash for PathNormalizeTechnique

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for PathNormalizeTechnique

fn eq(&self, other: &PathNormalizeTechnique) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for PathNormalizeTechnique