xypriss 9.12.38 → 9.12.39
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/src/server/components/static/XStatic.js +6 -8
- package/dist/cjs/src/server/components/static/XStatic.js.map +1 -1
- package/dist/esm/src/server/components/static/XStatic.js +6 -8
- package/dist/esm/src/server/components/static/XStatic.js.map +1 -1
- package/dist/index.d.ts +2 -0
- package/package.json +1 -1
|
@@ -284,22 +284,20 @@ class XStatic {
|
|
|
284
284
|
const resolvedPath = this.sys.path.resolve(fullPath);
|
|
285
285
|
const rootDir = this.sys.path.resolve(dir);
|
|
286
286
|
const projectRoot = this.sys.__root__;
|
|
287
|
+
// Check 1: Is the mounted directory inside the project root?
|
|
287
288
|
if (!options.allowOutsideRoot &&
|
|
288
289
|
!options.unsafe &&
|
|
289
290
|
projectRoot) {
|
|
290
|
-
// Check 1: Is the defined directory inside the project root?
|
|
291
291
|
if (!rootDir.startsWith(projectRoot)) {
|
|
292
|
-
this.qLog.warn(
|
|
293
|
-
// "security",
|
|
294
|
-
`Blocked attempt to serve directory outside project root: ${rootDir}`);
|
|
292
|
+
this.qLog.warn(`Blocked attempt to serve directory outside project root: ${rootDir}`);
|
|
295
293
|
res.status(403).end("Forbidden: Project Root Violation");
|
|
296
294
|
return next();
|
|
297
295
|
}
|
|
298
|
-
|
|
296
|
+
}
|
|
297
|
+
// Check 2: Is the requested file inside the target directory? (Directory Jail Protection)
|
|
298
|
+
if (!options.allowOutsideDir && !options.unsafe) {
|
|
299
299
|
if (!resolvedPath.startsWith(rootDir)) {
|
|
300
|
-
this.qLog.warn(
|
|
301
|
-
// "security",
|
|
302
|
-
`Blocked attempt to access file outside static root: ${resolvedPath}`);
|
|
300
|
+
this.qLog.warn(`Blocked attempt to access file outside static target directory: ${resolvedPath}`);
|
|
303
301
|
res.status(403).end("Forbidden: Sandbox Violation");
|
|
304
302
|
return next();
|
|
305
303
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"XStatic.js","sources":["../../../../../../src/server/components/static/XStatic.ts"],"sourcesContent":[null],"names":["Configs","XStaticMetaCache","Logger","QuickLogger","IXStaticSchem","UriNormalizer","stat"],"mappings":";;;;;;;;;;;AAAA;;;;;AAK6E;AAc7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DG;MACU,OAAO,CAAA;AAQhB;;;;;;;;;;;;;;;;;;AAkBG;IACH,WAAA,CACY,GAAU,EACV,GAAgB,EAAA;QADhB,IAAA,CAAA,GAAG,GAAH,GAAG;QACH,IAAA,CAAA,GAAG,GAAH,GAAG;AA3BP,QAAA,IAAA,CAAA,YAAY,GAA8B,IAAI,GAAG,EAAE;QA6BvD,IAAI,CAAC,YAAY,GAAGA,uBAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;AAC/C,QAAA,IAAI,CAAC,SAAS,GAAG,IAAIC,0BAAgB,CACjC,IAAI,CAAC,YAAY,CAAC,YAAY,IAAI,IAAI,CACzC;QACD,IAAI,CAAC,MAAM,GAAI,GAAW,CAAC,MAAM,IAAIC,aAAM,CAAC,WAAW,EAAE;QACzD,IAAI,CAAC,IAAI,GAAGC,uBAAW,CAAC,GAAG,CAAC,SAAS,CAAC;QAEtC,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,QAAQ,EACR,wDAAwD,CAC3D;QACD,IAAI,CAAC,eAAe,EAAE;IAC1B;AAEA;;;;;;;;;;;;;;;;;;AAkBG;IACK,eAAe,GAAA;AACnB,QAAA,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY;AAC3B,QAAA,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC;AAE7B,QAAA,IACI,CAAC,CAAC,QAAQ,IAAI,IAAI;AAClB,YAAA,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,EACnD;AACE,YAAA,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;QAC3D;QAEA,IACI,CAAC,CAAC,QAAQ;AACV,YAAA,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAC9B,CAAE,GAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAwB,CAAC,EAC/D;AACE,YAAA,MAAM,IAAI,KAAK,CACX,CAAA,uCAAA,EAA0C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAA,CAAA,EAAI,CAAC,CAAA,CAAA,CAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA,YAAA,EAAe,CAAC,CAAC,QAAQ,CAAA,CAAA,CAAG,CAC9G;QACL;QAEA,MAAM,gBAAgB,GAAGC,2BAAa,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC;AAEnE,QAAA,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE;AAC3B,YAAA,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACvD;IACJ;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4EG;AACI,IAAA,MAAM,CACT,KAAa,EACb,GAAW,EACX,UAAyB,EAAE,EAAA;QAE3B,MAAM,eAAe,GAAGC,2BAAa,CAAC,aAAa,CAAC,KAAK,CAAC;AAE1D,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;AAC9C,QAAA,MAAM,WAAW,GAAI,IAAI,CAAC,GAAW,CAAC,QAAQ;;AAG9C,QAAA,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW,EAAE;YAC7D,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;gBACtC,IAAI,CAAC,IAAI,CAAC,IAAI,CACV,CAAA,gEAAA,EAAmE,WAAW,CAAA,CAAE,CACnF;AACD,gBAAA,MAAM,IAAI,KAAK,CAAC,8CAA8C,WAAW,CAAA,CAAE,CAAC;YAChF;QACJ;;AAGA,QAAA,MAAM,WAAW,GAAG,eAAe,KAAK,GAAG,GAAG,YAAY,GAAG,CAAA,EAAG,eAAe,YAAY;QAE1F,OAAe,CAAC,aAAa,GAAI,OAAe,CAAC,aAAa,IAAI,EAAE;AACpE,QAAA,OAAe,CAAC,aAAa,CAAC,IAAI,CAAC;YAChC,WAAW;YACX;AACH,SAAA,CAAC;;AAGF,QAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CACR,eAAe,EACf,OAAO,GAAY,EAAE,GAAa,EAAE,IAAgB,KAAI;AACpD,YAAA,IAAI;;AAEA,gBAAA,IAAI,YAAY,GAAG,GAAG,CAAC,IAAI;AAC3B,gBAAA,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,EAAE;oBAC9B,YAAY,GAAG,GAAG;gBACtB;qBAAO;AACH,oBAAA,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,GAAG;AACvC,0BAAE;AACF,0BAAE,CAAA,EAAG,eAAe,CAAA,CAAA,CAAG;oBAC3B,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;wBAC7B,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAC7B,eAAe,CAAC,MAAM,CACzB;oBACL;gBACJ;;AAGA,gBAAA,MAAM,aAAa,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG;AAC7C,sBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;sBACxB,YAAY;AAClB,gBAAA,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE;;gBAGrD,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,MAAM;AAC1D,gBAAA,MAAM,WAAW,GACb,OAAO,aAAa,KAAK;sBACnB,aAAa,CAAC;sBACd,aAAa;AACvB,gBAAA,MAAM,gBAAgB,GAClB,OAAO,aAAa,KAAK;AACrB,sBAAE,aAAa,CAAC,MAAM,IAAI;sBACxB,EAAE;AAEZ,gBAAA,IAAI,WAAW,KAAK,MAAM,EAAE;AACxB,oBAAA,MAAM,YAAY,GACd,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;AACxB,wBAAA,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACvC,IAAI,YAAY,EAAE;wBACd,IAAI,CAAC,IAAI,CAAC,IAAI;;wBAEV,CAAA,2CAAA,EAA8C,QAAQ,CAAA,CAAE,CAC3D;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC;wBAC/C,OAAO,IAAI,EAAE;oBACjB;gBACJ;AAEA,gBAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC;;AAGtD,gBAAA,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;AACpD,gBAAA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;AAC1C,gBAAA,MAAM,WAAW,GAAI,IAAI,CAAC,GAAW,CAAC,QAAQ
|
|
1
|
+
{"version":3,"file":"XStatic.js","sources":["../../../../../../src/server/components/static/XStatic.ts"],"sourcesContent":[null],"names":["Configs","XStaticMetaCache","Logger","QuickLogger","IXStaticSchem","UriNormalizer","stat"],"mappings":";;;;;;;;;;;AAAA;;;;;AAK6E;AAc7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DG;MACU,OAAO,CAAA;AAQhB;;;;;;;;;;;;;;;;;;AAkBG;IACH,WAAA,CACY,GAAU,EACV,GAAgB,EAAA;QADhB,IAAA,CAAA,GAAG,GAAH,GAAG;QACH,IAAA,CAAA,GAAG,GAAH,GAAG;AA3BP,QAAA,IAAA,CAAA,YAAY,GAA8B,IAAI,GAAG,EAAE;QA6BvD,IAAI,CAAC,YAAY,GAAGA,uBAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;AAC/C,QAAA,IAAI,CAAC,SAAS,GAAG,IAAIC,0BAAgB,CACjC,IAAI,CAAC,YAAY,CAAC,YAAY,IAAI,IAAI,CACzC;QACD,IAAI,CAAC,MAAM,GAAI,GAAW,CAAC,MAAM,IAAIC,aAAM,CAAC,WAAW,EAAE;QACzD,IAAI,CAAC,IAAI,GAAGC,uBAAW,CAAC,GAAG,CAAC,SAAS,CAAC;QAEtC,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,QAAQ,EACR,wDAAwD,CAC3D;QACD,IAAI,CAAC,eAAe,EAAE;IAC1B;AAEA;;;;;;;;;;;;;;;;;;AAkBG;IACK,eAAe,GAAA;AACnB,QAAA,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY;AAC3B,QAAA,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC;AAE7B,QAAA,IACI,CAAC,CAAC,QAAQ,IAAI,IAAI;AAClB,YAAA,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,EACnD;AACE,YAAA,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;QAC3D;QAEA,IACI,CAAC,CAAC,QAAQ;AACV,YAAA,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAC9B,CAAE,GAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAwB,CAAC,EAC/D;AACE,YAAA,MAAM,IAAI,KAAK,CACX,CAAA,uCAAA,EAA0C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAA,CAAA,EAAI,CAAC,CAAA,CAAA,CAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA,YAAA,EAAe,CAAC,CAAC,QAAQ,CAAA,CAAA,CAAG,CAC9G;QACL;QAEA,MAAM,gBAAgB,GAAGC,2BAAa,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC;AAEnE,QAAA,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE;AAC3B,YAAA,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACvD;IACJ;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4EG;AACI,IAAA,MAAM,CACT,KAAa,EACb,GAAW,EACX,UAAyB,EAAE,EAAA;QAE3B,MAAM,eAAe,GAAGC,2BAAa,CAAC,aAAa,CAAC,KAAK,CAAC;AAE1D,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;AAC9C,QAAA,MAAM,WAAW,GAAI,IAAI,CAAC,GAAW,CAAC,QAAQ;;AAG9C,QAAA,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW,EAAE;YAC7D,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;gBACtC,IAAI,CAAC,IAAI,CAAC,IAAI,CACV,CAAA,gEAAA,EAAmE,WAAW,CAAA,CAAE,CACnF;AACD,gBAAA,MAAM,IAAI,KAAK,CAAC,8CAA8C,WAAW,CAAA,CAAE,CAAC;YAChF;QACJ;;AAGA,QAAA,MAAM,WAAW,GAAG,eAAe,KAAK,GAAG,GAAG,YAAY,GAAG,CAAA,EAAG,eAAe,YAAY;QAE1F,OAAe,CAAC,aAAa,GAAI,OAAe,CAAC,aAAa,IAAI,EAAE;AACpE,QAAA,OAAe,CAAC,aAAa,CAAC,IAAI,CAAC;YAChC,WAAW;YACX;AACH,SAAA,CAAC;;AAGF,QAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CACR,eAAe,EACf,OAAO,GAAY,EAAE,GAAa,EAAE,IAAgB,KAAI;AACpD,YAAA,IAAI;;AAEA,gBAAA,IAAI,YAAY,GAAG,GAAG,CAAC,IAAI;AAC3B,gBAAA,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,EAAE;oBAC9B,YAAY,GAAG,GAAG;gBACtB;qBAAO;AACH,oBAAA,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,GAAG;AACvC,0BAAE;AACF,0BAAE,CAAA,EAAG,eAAe,CAAA,CAAA,CAAG;oBAC3B,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;wBAC7B,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAC7B,eAAe,CAAC,MAAM,CACzB;oBACL;gBACJ;;AAGA,gBAAA,MAAM,aAAa,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG;AAC7C,sBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;sBACxB,YAAY;AAClB,gBAAA,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE;;gBAGrD,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,MAAM;AAC1D,gBAAA,MAAM,WAAW,GACb,OAAO,aAAa,KAAK;sBACnB,aAAa,CAAC;sBACd,aAAa;AACvB,gBAAA,MAAM,gBAAgB,GAClB,OAAO,aAAa,KAAK;AACrB,sBAAE,aAAa,CAAC,MAAM,IAAI;sBACxB,EAAE;AAEZ,gBAAA,IAAI,WAAW,KAAK,MAAM,EAAE;AACxB,oBAAA,MAAM,YAAY,GACd,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;AACxB,wBAAA,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACvC,IAAI,YAAY,EAAE;wBACd,IAAI,CAAC,IAAI,CAAC,IAAI;;wBAEV,CAAA,2CAAA,EAA8C,QAAQ,CAAA,CAAE,CAC3D;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC;wBAC/C,OAAO,IAAI,EAAE;oBACjB;gBACJ;AAEA,gBAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC;;AAGtD,gBAAA,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;AACpD,gBAAA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;AAC1C,gBAAA,MAAM,WAAW,GAAI,IAAI,CAAC,GAAW,CAAC,QAAQ;;gBAG9C,IACI,CAAC,OAAO,CAAC,gBAAgB;oBACzB,CAAC,OAAO,CAAC,MAAM;AACf,oBAAA,WAAW,EACb;oBACE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;wBAClC,IAAI,CAAC,IAAI,CAAC,IAAI,CACV,CAAA,yDAAA,EAA4D,OAAO,CAAA,CAAE,CACxE;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CACf,mCAAmC,CACtC;wBACD,OAAO,IAAI,EAAE;oBACjB;gBACJ;;gBAGA,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;oBAC7C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;wBACnC,IAAI,CAAC,IAAI,CAAC,IAAI,CACV,CAAA,gEAAA,EAAmE,YAAY,CAAA,CAAE,CACpF;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC;wBACnD,OAAO,IAAI,EAAE;oBACjB;gBACJ;;gBAGA,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC;gBACjD,IAAI,QAAQ,EAAE;AACV,oBAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;wBAClB,OAAO,IAAI,EAAE;oBACjB;;gBAEJ;qBAAO;AACH,oBAAA,IAAI,SAAS;AACb,oBAAA,IAAI;wBACA,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE;4BACrC,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;wBACzD;6BAAO;AACH,4BAAA,MAAM,WAAW,GAAGC,aAAI,CAAC,YAAY,CAAC;4BACtC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC;4BAChD,SAAS,GAAG,MAAM,WAAW;AAC7B,4BAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC;wBAC1C;oBACJ;oBAAE,OAAO,CAAC,EAAE;AACR,wBAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC;wBACtC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC;wBACvC,OAAO,IAAI,EAAE;oBACjB;;AAGA,oBAAA,IAAI,SAAS,CAAC,WAAW,EAAE,EAAE;wBACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC;wBACvC,OAAO,IAAI,EAAE;oBACjB;;oBAGA,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC;gBAC1C;;AAGA,gBAAA,MAAM,MAAM,GAAI,IAAI,CAAC,GAAW,CAAC,WAAW;gBAC5C,IAAI,MAAM,EAAE;AACR,oBAAA,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;;oBAGb,MAAM,MAAM,GACR,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,aAAa;AACrD,oBAAA,IAAI,MAAM,KAAK,SAAS,EAAE;wBACtB,GAAG,CAAC,SAAS,CACT,eAAe,EACf,CAAA,gBAAA,EAAmB,MAAM,CAAA,CAAE,CAC9B;oBACL;oBAEA,MAAM,CAAC,cAAc,CAAE,GAAW,CAAC,EAAE,EAAE,YAAY,CAAC;oBACpD,GAAG,CAAC,GAAG,EAAE;oBACT;gBACJ;qBAAO;oBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAChB,0EAA0E,CAC7E;gBACL;YACJ;YAAE,OAAO,GAAG,EAAE;gBACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAA,iBAAA,EAAoB,GAAG,CAAA,CAAE,CAAC;AACtD,gBAAA,IAAI,EAAE;YACV;AACJ,QAAA,CAAC,CACJ;AAED,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,QAAQ,EACR,CAAA,sBAAA,EAAyB,eAAe,CAAA,IAAA,EAAO,GAAG,CAAA,CAAE,CACvD;IACL;AAEA;;;;;;;;;;;;;;;;;AAiBG;AACI,IAAA,KAAK,CACR,MAAc,EACd,IAAY,EACZ,WAA0B,EAAE,EAAA;QAE5B,MAAM,GAAG,GACL,6DAA6D;QACjE,IAAI,CAAC,IAAI,CAAC,KAAK;;AAEX,QAAA,GAAG,CACN;;AAED,QAAA,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC;IACxB;AACH;;;;"}
|
|
@@ -282,22 +282,20 @@ class XStatic {
|
|
|
282
282
|
const resolvedPath = this.sys.path.resolve(fullPath);
|
|
283
283
|
const rootDir = this.sys.path.resolve(dir);
|
|
284
284
|
const projectRoot = this.sys.__root__;
|
|
285
|
+
// Check 1: Is the mounted directory inside the project root?
|
|
285
286
|
if (!options.allowOutsideRoot &&
|
|
286
287
|
!options.unsafe &&
|
|
287
288
|
projectRoot) {
|
|
288
|
-
// Check 1: Is the defined directory inside the project root?
|
|
289
289
|
if (!rootDir.startsWith(projectRoot)) {
|
|
290
|
-
this.qLog.warn(
|
|
291
|
-
// "security",
|
|
292
|
-
`Blocked attempt to serve directory outside project root: ${rootDir}`);
|
|
290
|
+
this.qLog.warn(`Blocked attempt to serve directory outside project root: ${rootDir}`);
|
|
293
291
|
res.status(403).end("Forbidden: Project Root Violation");
|
|
294
292
|
return next();
|
|
295
293
|
}
|
|
296
|
-
|
|
294
|
+
}
|
|
295
|
+
// Check 2: Is the requested file inside the target directory? (Directory Jail Protection)
|
|
296
|
+
if (!options.allowOutsideDir && !options.unsafe) {
|
|
297
297
|
if (!resolvedPath.startsWith(rootDir)) {
|
|
298
|
-
this.qLog.warn(
|
|
299
|
-
// "security",
|
|
300
|
-
`Blocked attempt to access file outside static root: ${resolvedPath}`);
|
|
298
|
+
this.qLog.warn(`Blocked attempt to access file outside static target directory: ${resolvedPath}`);
|
|
301
299
|
res.status(403).end("Forbidden: Sandbox Violation");
|
|
302
300
|
return next();
|
|
303
301
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"XStatic.js","sources":["../../../../../../src/server/components/static/XStatic.ts"],"sourcesContent":[null],"names":["Configs"],"mappings":";;;;;;;;;AAAA;;;;;AAK6E;AAc7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DG;MACU,OAAO,CAAA;AAQhB;;;;;;;;;;;;;;;;;;AAkBG;IACH,WAAA,CACY,GAAU,EACV,GAAgB,EAAA;QADhB,IAAA,CAAA,GAAG,GAAH,GAAG;QACH,IAAA,CAAA,GAAG,GAAH,GAAG;AA3BP,QAAA,IAAA,CAAA,YAAY,GAA8B,IAAI,GAAG,EAAE;QA6BvD,IAAI,CAAC,YAAY,GAAGA,oBAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;AAC/C,QAAA,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CACjC,IAAI,CAAC,YAAY,CAAC,YAAY,IAAI,IAAI,CACzC;QACD,IAAI,CAAC,MAAM,GAAI,GAAW,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE;QACzD,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC;QAEtC,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,QAAQ,EACR,wDAAwD,CAC3D;QACD,IAAI,CAAC,eAAe,EAAE;IAC1B;AAEA;;;;;;;;;;;;;;;;;;AAkBG;IACK,eAAe,GAAA;AACnB,QAAA,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY;AAC3B,QAAA,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC;AAE7B,QAAA,IACI,CAAC,CAAC,QAAQ,IAAI,IAAI;AAClB,YAAA,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,EACnD;AACE,YAAA,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;QAC3D;QAEA,IACI,CAAC,CAAC,QAAQ;AACV,YAAA,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAC9B,CAAE,GAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAwB,CAAC,EAC/D;AACE,YAAA,MAAM,IAAI,KAAK,CACX,CAAA,uCAAA,EAA0C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAA,CAAA,EAAI,CAAC,CAAA,CAAA,CAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA,YAAA,EAAe,CAAC,CAAC,QAAQ,CAAA,CAAA,CAAG,CAC9G;QACL;QAEA,MAAM,gBAAgB,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC;AAEnE,QAAA,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE;AAC3B,YAAA,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACvD;IACJ;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4EG;AACI,IAAA,MAAM,CACT,KAAa,EACb,GAAW,EACX,UAAyB,EAAE,EAAA;QAE3B,MAAM,eAAe,GAAG,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC;AAE1D,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;AAC9C,QAAA,MAAM,WAAW,GAAI,IAAI,CAAC,GAAW,CAAC,QAAQ;;AAG9C,QAAA,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW,EAAE;YAC7D,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;gBACtC,IAAI,CAAC,IAAI,CAAC,IAAI,CACV,CAAA,gEAAA,EAAmE,WAAW,CAAA,CAAE,CACnF;AACD,gBAAA,MAAM,IAAI,KAAK,CAAC,8CAA8C,WAAW,CAAA,CAAE,CAAC;YAChF;QACJ;;AAGA,QAAA,MAAM,WAAW,GAAG,eAAe,KAAK,GAAG,GAAG,YAAY,GAAG,CAAA,EAAG,eAAe,YAAY;QAE1F,OAAe,CAAC,aAAa,GAAI,OAAe,CAAC,aAAa,IAAI,EAAE;AACpE,QAAA,OAAe,CAAC,aAAa,CAAC,IAAI,CAAC;YAChC,WAAW;YACX;AACH,SAAA,CAAC;;AAGF,QAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CACR,eAAe,EACf,OAAO,GAAY,EAAE,GAAa,EAAE,IAAgB,KAAI;AACpD,YAAA,IAAI;;AAEA,gBAAA,IAAI,YAAY,GAAG,GAAG,CAAC,IAAI;AAC3B,gBAAA,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,EAAE;oBAC9B,YAAY,GAAG,GAAG;gBACtB;qBAAO;AACH,oBAAA,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,GAAG;AACvC,0BAAE;AACF,0BAAE,CAAA,EAAG,eAAe,CAAA,CAAA,CAAG;oBAC3B,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;wBAC7B,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAC7B,eAAe,CAAC,MAAM,CACzB;oBACL;gBACJ;;AAGA,gBAAA,MAAM,aAAa,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG;AAC7C,sBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;sBACxB,YAAY;AAClB,gBAAA,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE;;gBAGrD,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,MAAM;AAC1D,gBAAA,MAAM,WAAW,GACb,OAAO,aAAa,KAAK;sBACnB,aAAa,CAAC;sBACd,aAAa;AACvB,gBAAA,MAAM,gBAAgB,GAClB,OAAO,aAAa,KAAK;AACrB,sBAAE,aAAa,CAAC,MAAM,IAAI;sBACxB,EAAE;AAEZ,gBAAA,IAAI,WAAW,KAAK,MAAM,EAAE;AACxB,oBAAA,MAAM,YAAY,GACd,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;AACxB,wBAAA,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACvC,IAAI,YAAY,EAAE;wBACd,IAAI,CAAC,IAAI,CAAC,IAAI;;wBAEV,CAAA,2CAAA,EAA8C,QAAQ,CAAA,CAAE,CAC3D;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC;wBAC/C,OAAO,IAAI,EAAE;oBACjB;gBACJ;AAEA,gBAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC;;AAGtD,gBAAA,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;AACpD,gBAAA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;AAC1C,gBAAA,MAAM,WAAW,GAAI,IAAI,CAAC,GAAW,CAAC,QAAQ
|
|
1
|
+
{"version":3,"file":"XStatic.js","sources":["../../../../../../src/server/components/static/XStatic.ts"],"sourcesContent":[null],"names":["Configs"],"mappings":";;;;;;;;;AAAA;;;;;AAK6E;AAc7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DG;MACU,OAAO,CAAA;AAQhB;;;;;;;;;;;;;;;;;;AAkBG;IACH,WAAA,CACY,GAAU,EACV,GAAgB,EAAA;QADhB,IAAA,CAAA,GAAG,GAAH,GAAG;QACH,IAAA,CAAA,GAAG,GAAH,GAAG;AA3BP,QAAA,IAAA,CAAA,YAAY,GAA8B,IAAI,GAAG,EAAE;QA6BvD,IAAI,CAAC,YAAY,GAAGA,oBAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;AAC/C,QAAA,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CACjC,IAAI,CAAC,YAAY,CAAC,YAAY,IAAI,IAAI,CACzC;QACD,IAAI,CAAC,MAAM,GAAI,GAAW,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE;QACzD,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC;QAEtC,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,QAAQ,EACR,wDAAwD,CAC3D;QACD,IAAI,CAAC,eAAe,EAAE;IAC1B;AAEA;;;;;;;;;;;;;;;;;;AAkBG;IACK,eAAe,GAAA;AACnB,QAAA,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY;AAC3B,QAAA,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC;AAE7B,QAAA,IACI,CAAC,CAAC,QAAQ,IAAI,IAAI;AAClB,YAAA,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,EACnD;AACE,YAAA,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;QAC3D;QAEA,IACI,CAAC,CAAC,QAAQ;AACV,YAAA,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAC9B,CAAE,GAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAwB,CAAC,EAC/D;AACE,YAAA,MAAM,IAAI,KAAK,CACX,CAAA,uCAAA,EAA0C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAA,CAAA,EAAI,CAAC,CAAA,CAAA,CAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA,YAAA,EAAe,CAAC,CAAC,QAAQ,CAAA,CAAA,CAAG,CAC9G;QACL;QAEA,MAAM,gBAAgB,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC;AAEnE,QAAA,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE;AAC3B,YAAA,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACvD;IACJ;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4EG;AACI,IAAA,MAAM,CACT,KAAa,EACb,GAAW,EACX,UAAyB,EAAE,EAAA;QAE3B,MAAM,eAAe,GAAG,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC;AAE1D,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;AAC9C,QAAA,MAAM,WAAW,GAAI,IAAI,CAAC,GAAW,CAAC,QAAQ;;AAG9C,QAAA,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW,EAAE;YAC7D,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;gBACtC,IAAI,CAAC,IAAI,CAAC,IAAI,CACV,CAAA,gEAAA,EAAmE,WAAW,CAAA,CAAE,CACnF;AACD,gBAAA,MAAM,IAAI,KAAK,CAAC,8CAA8C,WAAW,CAAA,CAAE,CAAC;YAChF;QACJ;;AAGA,QAAA,MAAM,WAAW,GAAG,eAAe,KAAK,GAAG,GAAG,YAAY,GAAG,CAAA,EAAG,eAAe,YAAY;QAE1F,OAAe,CAAC,aAAa,GAAI,OAAe,CAAC,aAAa,IAAI,EAAE;AACpE,QAAA,OAAe,CAAC,aAAa,CAAC,IAAI,CAAC;YAChC,WAAW;YACX;AACH,SAAA,CAAC;;AAGF,QAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CACR,eAAe,EACf,OAAO,GAAY,EAAE,GAAa,EAAE,IAAgB,KAAI;AACpD,YAAA,IAAI;;AAEA,gBAAA,IAAI,YAAY,GAAG,GAAG,CAAC,IAAI;AAC3B,gBAAA,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,EAAE;oBAC9B,YAAY,GAAG,GAAG;gBACtB;qBAAO;AACH,oBAAA,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,GAAG;AACvC,0BAAE;AACF,0BAAE,CAAA,EAAG,eAAe,CAAA,CAAA,CAAG;oBAC3B,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;wBAC7B,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAC7B,eAAe,CAAC,MAAM,CACzB;oBACL;gBACJ;;AAGA,gBAAA,MAAM,aAAa,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG;AAC7C,sBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;sBACxB,YAAY;AAClB,gBAAA,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE;;gBAGrD,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,MAAM;AAC1D,gBAAA,MAAM,WAAW,GACb,OAAO,aAAa,KAAK;sBACnB,aAAa,CAAC;sBACd,aAAa;AACvB,gBAAA,MAAM,gBAAgB,GAClB,OAAO,aAAa,KAAK;AACrB,sBAAE,aAAa,CAAC,MAAM,IAAI;sBACxB,EAAE;AAEZ,gBAAA,IAAI,WAAW,KAAK,MAAM,EAAE;AACxB,oBAAA,MAAM,YAAY,GACd,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;AACxB,wBAAA,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACvC,IAAI,YAAY,EAAE;wBACd,IAAI,CAAC,IAAI,CAAC,IAAI;;wBAEV,CAAA,2CAAA,EAA8C,QAAQ,CAAA,CAAE,CAC3D;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC;wBAC/C,OAAO,IAAI,EAAE;oBACjB;gBACJ;AAEA,gBAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC;;AAGtD,gBAAA,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;AACpD,gBAAA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;AAC1C,gBAAA,MAAM,WAAW,GAAI,IAAI,CAAC,GAAW,CAAC,QAAQ;;gBAG9C,IACI,CAAC,OAAO,CAAC,gBAAgB;oBACzB,CAAC,OAAO,CAAC,MAAM;AACf,oBAAA,WAAW,EACb;oBACE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;wBAClC,IAAI,CAAC,IAAI,CAAC,IAAI,CACV,CAAA,yDAAA,EAA4D,OAAO,CAAA,CAAE,CACxE;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CACf,mCAAmC,CACtC;wBACD,OAAO,IAAI,EAAE;oBACjB;gBACJ;;gBAGA,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;oBAC7C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;wBACnC,IAAI,CAAC,IAAI,CAAC,IAAI,CACV,CAAA,gEAAA,EAAmE,YAAY,CAAA,CAAE,CACpF;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC;wBACnD,OAAO,IAAI,EAAE;oBACjB;gBACJ;;gBAGA,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC;gBACjD,IAAI,QAAQ,EAAE;AACV,oBAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;wBAClB,OAAO,IAAI,EAAE;oBACjB;;gBAEJ;qBAAO;AACH,oBAAA,IAAI,SAAS;AACb,oBAAA,IAAI;wBACA,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE;4BACrC,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;wBACzD;6BAAO;AACH,4BAAA,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;4BACtC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC;4BAChD,SAAS,GAAG,MAAM,WAAW;AAC7B,4BAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC;wBAC1C;oBACJ;oBAAE,OAAO,CAAC,EAAE;AACR,wBAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC;wBACtC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC;wBACvC,OAAO,IAAI,EAAE;oBACjB;;AAGA,oBAAA,IAAI,SAAS,CAAC,WAAW,EAAE,EAAE;wBACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC;wBACvC,OAAO,IAAI,EAAE;oBACjB;;oBAGA,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC;gBAC1C;;AAGA,gBAAA,MAAM,MAAM,GAAI,IAAI,CAAC,GAAW,CAAC,WAAW;gBAC5C,IAAI,MAAM,EAAE;AACR,oBAAA,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;;oBAGb,MAAM,MAAM,GACR,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,aAAa;AACrD,oBAAA,IAAI,MAAM,KAAK,SAAS,EAAE;wBACtB,GAAG,CAAC,SAAS,CACT,eAAe,EACf,CAAA,gBAAA,EAAmB,MAAM,CAAA,CAAE,CAC9B;oBACL;oBAEA,MAAM,CAAC,cAAc,CAAE,GAAW,CAAC,EAAE,EAAE,YAAY,CAAC;oBACpD,GAAG,CAAC,GAAG,EAAE;oBACT;gBACJ;qBAAO;oBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAChB,0EAA0E,CAC7E;gBACL;YACJ;YAAE,OAAO,GAAG,EAAE;gBACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAA,iBAAA,EAAoB,GAAG,CAAA,CAAE,CAAC;AACtD,gBAAA,IAAI,EAAE;YACV;AACJ,QAAA,CAAC,CACJ;AAED,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,QAAQ,EACR,CAAA,sBAAA,EAAyB,eAAe,CAAA,IAAA,EAAO,GAAG,CAAA,CAAE,CACvD;IACL;AAEA;;;;;;;;;;;;;;;;;AAiBG;AACI,IAAA,KAAK,CACR,MAAc,EACd,IAAY,EACZ,WAA0B,EAAE,EAAA;QAE5B,MAAM,GAAG,GACL,6DAA6D;QACjE,IAAI,CAAC,IAAI,CAAC,KAAK;;AAEX,QAAA,GAAG,CACN;;AAED,QAAA,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC;IACxB;AACH;;;;"}
|
package/dist/index.d.ts
CHANGED
|
@@ -9403,6 +9403,8 @@ type IXStatic = typeof IXStaticSchem.types & {
|
|
|
9403
9403
|
interface StaticOptions {
|
|
9404
9404
|
/** Allow serving files outside of the project root (Security Risk) */
|
|
9405
9405
|
allowOutsideRoot?: boolean;
|
|
9406
|
+
/** Allow serving files outside of the mounted target directory (Security Risk). Default: false */
|
|
9407
|
+
allowOutsideDir?: boolean;
|
|
9406
9408
|
/** Disable path validation safety checks */
|
|
9407
9409
|
unsafe?: boolean;
|
|
9408
9410
|
/** Cache-Control max-age header */
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "xypriss",
|
|
3
|
-
"version": "9.12.
|
|
3
|
+
"version": "9.12.39",
|
|
4
4
|
"description": "XyPriss is a high-performance, TypeScript-first hyper-system web framework powered by a native Go core (XHSC), featuring robust multi-tenant sandboxing, secure native file streaming, and zero Express dependencies.",
|
|
5
5
|
"author": {
|
|
6
6
|
"DEV.to": "https://dev.to/nehonix",
|