javascript-solid-server 0.0.68 → 0.0.69
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +1 -1
- package/src/server.js +1 -1
package/package.json
CHANGED
package/src/server.js
CHANGED
|
@@ -232,7 +232,7 @@ export function createServer(options = {}) {
|
|
|
232
232
|
// Security: Block access to dotfiles except allowed Solid-specific ones
|
|
233
233
|
// This prevents exposure of .git/, .env, .htpasswd, etc.
|
|
234
234
|
// Git protocol requests bypass this check when git is enabled
|
|
235
|
-
const ALLOWED_DOTFILES = ['.well-known', '.acl', '.meta', '.pods', '.notifications'];
|
|
235
|
+
const ALLOWED_DOTFILES = ['.well-known', '.acl', '.meta', '.pods', '.notifications', '.account'];
|
|
236
236
|
fastify.addHook('onRequest', async (request, reply) => {
|
|
237
237
|
// Allow git protocol requests through when git is enabled
|
|
238
238
|
if (gitEnabled && isGitRequest(request.url)) {
|