Commit graph

5 commits

Author SHA1 Message Date
Simon Cruanes
8050fb1f05 fix: use realpath to validate filesystem paths against traversal
- Add string_prefix helper to check path containment
- Compute root_canonical once per add_vfs_ call
- Use realpath only for filesystem (on_fs=true), keeping simple
  contains_dot_dot check for VFS
- Paths are already URL-decoded by Route.rest_of_path_urlencoded
2026-02-09 03:48:42 +00:00
Simon Cruanes
84adbb13b2
cleanup 2024-04-03 21:36:14 -04:00
Simon Cruanes
384515a594
dir: handle html 2024-02-27 11:00:42 -05:00
Simon Cruanes
950f0e734f
fix bugs 2024-02-26 22:50:30 -05:00
Simon Cruanes
04be73ee00
refactor the rest 2024-02-26 13:55:20 -05:00
Renamed from src/Tiny_httpd_dir.ml (Browse further)