From a2825c5dd952769f139a16448dc1ca1be61b6058 Mon Sep 17 00:00:00 2001
From: Matthew Holt <mholt@users.noreply.github.com>
Date: Thu, 19 Feb 2026 13:17:19 -0700
Subject: [PATCH] fileserver: Replace \ with \\ in file matcher paths

---
 modules/caddyhttp/fileserver/matcher.go                     | 1 +
 modules/caddyhttp/fileserver/matcher_test.go                | 6 ++++++
 "modules/caddyhttp/fileserver/testdata/foodir/secr\\et.txt" | 0
 3 files changed, 7 insertions(+)
 create mode 100644 "modules/caddyhttp/fileserver/testdata/foodir/secr\\et.txt"

diff --git a/modules/caddyhttp/fileserver/matcher.go b/modules/caddyhttp/fileserver/matcher.go
index 152f31430..8ced5a19d 100644
--- a/modules/caddyhttp/fileserver/matcher.go
+++ b/modules/caddyhttp/fileserver/matcher.go
@@ -720,6 +720,7 @@ var globSafeRepl = strings.NewReplacer(
 	"*", "\\*",
 	"[", "\\[",
 	"?", "\\?",
+	"\\", "\\\\",
 )
 
 const (
diff --git a/modules/caddyhttp/fileserver/matcher_test.go b/modules/caddyhttp/fileserver/matcher_test.go
index f0ec4b392..36483fcd9 100644
--- a/modules/caddyhttp/fileserver/matcher_test.go
+++ b/modules/caddyhttp/fileserver/matcher_test.go
@@ -115,6 +115,12 @@ func TestFileMatcher(t *testing.T) {
 			expectedType: "file",
 			matched:      !isWindows,
 		},
+		{
+			path:         "/foodir/secr%5Cet.txt",
+			expectedPath: "/foodir/secr\\et.txt",
+			expectedType: "file",
+			matched:      true,
+		},
 	} {
 		m := &MatchFile{
 			fsmap:    &filesystems.FileSystemMap{},
diff --git "a/modules/caddyhttp/fileserver/testdata/foodir/secr\\et.txt" "b/modules/caddyhttp/fileserver/testdata/foodir/secr\\et.txt"
new file mode 100644
index 000000000..e69de29bb