Commit graph

8 commits

Author SHA1 Message Date
Simon Cruanes
8050fb1f05 fix: use realpath to validate filesystem paths against traversal
- Add string_prefix helper to check path containment
- Compute root_canonical once per add_vfs_ call
- Use realpath only for filesystem (on_fs=true), keeping simple
  contains_dot_dot check for VFS
- Paths are already URL-decoded by Route.rest_of_path_urlencoded
2026-02-09 03:48:42 +00:00
Simon Cruanes
de9760d786
format 2024-08-15 09:18:15 -04:00
Jonah Beckford
14a48756a8 Do not use sigprocmask on Windows
Fixes #85
2024-04-18 11:20:40 -04:00
Simon Cruanes
84adbb13b2
cleanup 2024-04-03 21:36:14 -04:00
Simon Cruanes
eada4cde08
less verbose logs for unix server 2024-02-28 16:24:15 -05:00
Simon Cruanes
384515a594
dir: handle html 2024-02-27 11:00:42 -05:00
Simon Cruanes
950f0e734f
fix bugs 2024-02-26 22:50:30 -05:00
Simon Cruanes
04be73ee00
refactor the rest 2024-02-26 13:55:20 -05:00