diff --git a/docs/static-files.md b/docs/static-files.md index 60046b5..7522985 100644 --- a/docs/static-files.md +++ b/docs/static-files.md @@ -10,7 +10,9 @@ It is possible to serve static files with a custom path pattern and `NamedFile`. -:::warning Matching a path tail with the `[.*]` regex and using it to return a `NamedFile` has serious security implications. It offers the possibility for an attacker to insert `../` into the URL and access every file on the host that the user running the server has access to. ::: +:::warning +Matching a path tail with the `[.*]` regex and using it to return a `NamedFile` has serious security implications. It offers the possibility for an attacker to insert `../` into the URL and access every file on the host that the user running the server has access to. +::: ## Directory