actix/actix-website
1
0
Fork 0
mirror of https://github.com/actix/actix-website synced 2025-06-27 07:29:02 +02:00
Code Issues Releases Wiki Activity

prettier markdown

Browse Source
This commit is contained in:
Rob Ede
2023-11-01 15:28:34 +00:00
parent 7c4b52623e
commit 0d0e7f4433
17 changed files with 77 additions and 208 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
docs/static-files.md
View File

@ -10,10 +10,7 @@ It is possible to serve static files with a custom path pattern and `NamedFile`.
<CodeBlock example="static-files" file="main.rs" section="individual-file" />
:::warning
Matching a path tail with the `[.*]` regex and using it to return a `NamedFile` has serious security implications.
It offers the possibility for an attacker to insert `../` into the URL and access every file on the host that the user running the server has access to.
:::
:::warning Matching a path tail with the `[.*]` regex and using it to return a `NamedFile` has serious security implications. It offers the possibility for an attacker to insert `../` into the URL and access every file on the host that the user running the server has access to. :::
## Directory