MrFastwind 9f232b5225 fix(backend): add path validation to DeleteMod and improve GetLog security ...

- DeleteMod now validates path prefix against SERVERFILE_DIR and MODS_DIR
  before allowing deletion (prevents arbitrary directory deletion)
- GetLog uses strings.ContainsAny for cross-platform path traversal check

2026-07-23 20:15:06 +02:00

..

cmd/server

Make deployment-friendly defaults: no env vars needed to run

2026-07-09 15:42:54 +02:00

embed

Embed frontend dist into Go binary; remove frontend path from health

2026-07-09 15:27:50 +02:00

internal

fix(backend): add path validation to DeleteMod and improve GetLog security

2026-07-23 20:15:06 +02:00

go.mod

refactor(modlist): replace html/template with text/template and clean up deps

2026-07-09 14:13:09 +02:00

go.sum

refactor(modlist): replace html/template with text/template and clean up deps

2026-07-09 14:13:09 +02:00