1# ?go-get=1 answers with the owner and repo from the path in its page, so2# only paths whose segments are names get that answer. Anything else (here3# a planted tag, sent encoded as a browser would) gets the page the path4# would have without go-get=1, and the markup appears nowhere.5. "$(dirname "$0")/../lib.sh"6user dami7repo dami/greet8export FORGE_BASE_URL=https://git.test9caddy_server10for p in '/zz/probe%3Cb%3Emarker' '/zz%3Cb%3Ex/greet' '/dami/greet%22%3E%3Cb%3Ex' '/dami/greet.git%3Cb%3E/x'; do11 http -s -i "$C$p?go-get=1" >"$T/res"12 lacks "$T/res" '<b>'13 lacks "$T/res" 'go-import'14 has "$T/res" '^HTTP/1.1 404 '15done