yusing a541d75bb5 fix(api/file): prevent path traversal in file API ...

Use os.OpenRoot to restrict file access to the application root,
preventing directory traversal attacks through the file download endpoint.

Also add test to verify path traversal attempts are blocked.

2026-03-19 10:50:58 +08:00

2.2 KiB

Raw Permalink Blame History

View Raw