Protection can be deactivated easily using double slash character "//"

[mdtanrikulu]

If I want to protect "test1" index, i'm writing to constraint, "/test1" path.

http://localhost:9200/test1?pretty

It gives me "{"status":403,"message":"Forbidden. Not authorized."}" code. But;

http://localhost:9200//test1?pretty

I can reach that index still with double slash character.

[bverma0808]

facing the same issue