Commit Graph
2 Commits
Author SHA1 Message Date
MrFastwind 9f232b5225 fix(backend): add path validation to DeleteMod and improve GetLog security
- DeleteMod now validates path prefix against SERVERFILE_DIR and MODS_DIR
  before allowing deletion (prevents arbitrary directory deletion)
- GetLog uses strings.ContainsAny for cross-platform path traversal check
2026-07-23 20:15:06 +02:00
MrFastwind b853aead8c Initial commit 2026-07-06 14:14:58 +02:00