We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent c695a3c commit f56e7a5Copy full SHA for f56e7a5
backend/bracket/app.py
@@ -165,7 +165,7 @@ async def generic_exception_handler(request: Request, exc: Exception) -> JSONRes
165
async def frontend(full_path: str) -> FileResponse:
166
p = frontend_root / Path(full_path)
167
168
- # Checking `str(path) in allowed_paths` should be enough here but we check for more cases
+ # Checking `str(p) in allowed_paths` should be enough here but we check for more cases
169
# to be sure and avoid AI tools raising false positives.
170
if p.exists() and p.is_file() and str(p) in allowed_paths and frontend_root in p.parents:
171
return FileResponse(p)
0 commit comments