zdashboard 2.3.0 → 2.3.1

package/dist/cli.js

@@ -69,11 +69,12 @@ function loadConfig(root) {
       const record = kv;
       const product = Number(record.product);
       if (!record.url || !product) return null;
+      const str = (v) => typeof v === "string" ? v : v == null ? void 0 : String(v);
       return {
         url: String(record.url).replace(/\/+$/, ""),
-        account: record.account ?? "",
-        password: record.password,
-        token: record.token,
+        account: str(record.account) ?? "",
+        password: str(record.password),
+        token: str(record.token),
         product
       };
     } catch {
@@ -166,7 +167,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "zdashboard",
-  version: "2.3.0",
+  version: "2.3.1",
   description: "ZCode skill dashboard platform \u2014 pluggable viewers for zdesign/zview/zreview/zgoal",
   type: "module",
   bin: {
@@ -534,7 +535,8 @@ var ServerService = class extends Service {
         const fp = path4.join(dir, rel);
         if (fp.indexOf(dir + path4.sep) !== 0) {
           res.writeHead(403);
-          return res.end("Forbidden");
+          res.end("Forbidden");
+          return false;
         }
         this.serveFile(fp, req, res, true);
         return true;