From bd6b5eea1f05cc83e1a506159088b33a0c91a48e Mon Sep 17 00:00:00 2001
From: dpdev69 <4314475+dpdev69@users.noreply.github.com>
Date: Wed, 21 Oct 2026 21:05:02 +0000
Subject: [PATCH] Site: redirect links with Markdown junk stuck to the end
 (/**) instead of a 404

Links pasted from chat apps and AI answers often carry "**", ")." or similar
after the path. A 404 whose path ends in that junk now 301s to the clean path.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013BvkbbPEvpbYWP2r43ZqnW
---
 functions/_middleware.js | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/functions/_middleware.js b/functions/_middleware.js
index 57454f0..36e4f45 100644
--- a/functions/_middleware.js
+++ b/functions/_middleware.js
@@ -2,8 +2,21 @@
 // inline script into every page on the zone and copies the nonce from script-src onto
 // it, so the script runs without 'unsafe-inline'. Our own scripts load from /assets/,
 // and the one-line inline "js" class script is allowed by its hash in _headers.
-export async function onRequest({ next }) {
+//
+// Links pasted from chat apps and AI answers often carry Markdown or punctuation stuck
+// to the end ("/**", "/privacy)."). A 404 whose path ends in that junk redirects to the
+// path without it; whatever is left is served or 404s as usual, so a page that exists is
+// never redirected and the clean path cannot loop.
+const JUNK = /(?:[*_)\].,;:!'"`>]|%2A|%29|%5D|%22|%27|%60|%3E)+$/i;
+export const tidyPath = (p) => { const t = p.replace(JUNK, ""); return t !== p ? (t || "/") : null; };
+
+export async function onRequest({ request, next }) {
   const res = await next();
+  if (res.status === 404) {
+    const url = new URL(request.url);
+    const tidy = tidyPath(url.pathname);
+    if (tidy) return Response.redirect(new URL(tidy + url.search, url).toString(), 301);
+  }
   const csp = res.headers.get("Content-Security-Policy");
   if (!csp || !(res.headers.get("Content-Type") || "").includes("text/html")) return res;
   const bytes = crypto.getRandomValues(new Uint8Array(16));