When using the OpenApiFeature up to and including ServiceStack.Api.OpenApi v5.12, placing additional slashes before swagger-ui in the url will reveal the petstore demo page.
This can be reproduced using the selfhost sample
https://github.com/NetCoreTemplates/selfhost.git
Using a url that is not "localhost" and the following line added to the AppHost.Configure method:
Plugins.Add(new OpenApiFeature());
When using the OpenApiFeature up to and including ServiceStack.Api.OpenApi v5.12, placing additional slashes before swagger-ui in the url will reveal the petstore demo page.
For example http://mydomain.com//swagger-ui http://mydomain.com/////swagger-ui
This can be reproduced using the selfhost sample https://github.com/NetCoreTemplates/selfhost.git Using a url that is not "localhost" and the following line added to the AppHost.Configure method:
Plugins.Add(new OpenApiFeature());