@gallop.software/studio 2.3.140 → 2.3.141

package/dist/server/index.js

@@ -4580,30 +4580,11 @@ async function handleFontsList(request) {
   const requestedPath = searchParams.get("path") || "_fonts";
   try {
     const items = [];
-    let fsPath;
-    let allowedPaths = ["_fonts", "src/fonts", "src"];
-    const isAllowed = allowedPaths.some(
-      (allowed) => requestedPath === allowed || requestedPath.startsWith(allowed + "/")
-    );
+    const isAllowed = requestedPath === "_fonts" || requestedPath.startsWith("_fonts/");
     if (!isAllowed) {
       return jsonResponse({ items: [], error: "Path not allowed" }, { status: 400 });
     }
-    if (requestedPath === "src") {
-      const fontsFolderPath = getWorkspacePath("src", "fonts");
-      try {
-        const stat = await fs12.stat(fontsFolderPath);
-        if (stat.isDirectory()) {
-          items.push({
-            name: "fonts",
-            path: "src/fonts",
-            type: "folder"
-          });
-        }
-      } catch {
-      }
-      return jsonResponse({ items, canCreate: true });
-    }
-    fsPath = getWorkspacePath(requestedPath);
+    const fsPath = getWorkspacePath(requestedPath);
     try {
       const stat = await fs12.stat(fsPath);
       if (!stat.isDirectory()) {
@@ -4695,10 +4676,7 @@ async function handleFontsCreateFolder(request) {
     if (!targetPath || !name) {
       return jsonResponse({ error: "Path and name are required" }, { status: 400 });
     }
-    const allowedPaths = ["_fonts", "src/fonts", "src"];
-    const isAllowed = allowedPaths.some(
-      (allowed) => targetPath === allowed || targetPath.startsWith(allowed + "/")
-    );
+    const isAllowed = targetPath === "_fonts" || targetPath.startsWith("_fonts/");
     if (!isAllowed) {
       return jsonResponse({ error: "Path not allowed" }, { status: 400 });
     }
@@ -4719,12 +4697,8 @@ async function handleFontsDelete(request) {
     if (!paths || !Array.isArray(paths) || paths.length === 0) {
       return jsonResponse({ error: "Paths are required" }, { status: 400 });
     }
-    const allowedPaths = ["_fonts", "src/fonts"];
     for (const p of paths) {
-      const isAllowed = allowedPaths.some(
-        (allowed) => p.startsWith(allowed + "/")
-      );
-      if (!isAllowed) {
+      if (!p.startsWith("_fonts/")) {
         return jsonResponse({ error: `Path not allowed: ${p}` }, { status: 400 });
       }
     }