bvandeusenandClaude Sonnet 4.6 4d55d9d82a Fix scanner probes returning 200 via SPA catch-all ...

The 404 handler was unconditionally serving index.html (200) for all
non-API, non-static paths, including scanner probes for .php, .asp, .cgi
etc. Added _SPA_EXTENSIONS set so paths with unknown extensions get a
real 404 instead of a misleading 200.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-09 18:28:25 -04:00

..

fabledassistant

Fix scanner probes returning 200 via SPA catch-all

2026-03-09 18:28:25 -04:00