[Copilot]

FileProcessMiddleware relied on URI normalization to prevent traversal, and HttpServerTrait emitted a misspelled legacy response event. ReactServer dispatches events directly and does not run middleware.

• Path traversal: Reject parent-directory segments after URL decoding and separator normalization; unsafe paths continue to the next handler.
• Legacy events: Correct the event name to response.
• ReactServer: Document its direct event dispatch behavior.

$middleware = new FileProcessMiddleware($publicPath);
// /%2e%2e/secret.txt is delegated, not served from outside $publicPath.

• Fixes [HTTP] bugs #1377

[asika32764]

@copilot Try make ReactServer also supports middleware

[Copilot]

@copilot Try make ReactServer also supports middleware

Added middleware execution and configuration APIs to ReactServer, with a regression test. Commit: 85985a6.