Commit graph

2 commits

Author SHA1 Message Date
jegly
9d7eba705a Fix path injection in local file handler (CodeQL go/path-injection)
ServeFile's built-in ".." rejection only covers r.URL.Path, not a path handed
to it explicitly from a query param — validate p resolves to a real, regular
file before serving.
2026-07-06 15:51:40 +10:00
jegly
ac609bc80c Publish full source including logcat visual map engine 2026-06-30 12:38:37 +10:00