v0.29.5

tools/checks/web_server_contracts.py

@@ -45,6 +45,16 @@ need(vhost,
      "pub source: Source",
      "vhost requires at least one backend member for Reverse Proxy sources",
      "Web Server location cannot pin a reverse-proxy backend")
+# PATH_INFO must be dispatched before `try_files` rewrites a valid
+# Roundcube /static.php/skins/... request into the index.php controller.
+serve = (web_dir / "serve.rs").read_text()
+assert serve.index("if let Ok(components) = path_components(&rewritten_path)") < serve.index("match resolve_try_files(")
+assert "hardening_denied_path(service, &script_path)" in serve
+assert "htaccess::denied(service.htaccess.as_ref(), &script_path)" in serve
+need(web,
+     "roundcube_static_php_path_info_runs_before_front_controller_try_files",
+     "without_php_path_info_try_files_keeps_legacy_front_controller_fallback")
+
 need(web,
      "pub struct Service",
      "pub document_root: PathBuf",