From 6fea6cd0cab15998157574585d529f51aee2520d Mon Sep 17 00:00:00 2001 From: Yuki Okushi Date: Sat, 11 Nov 2023 19:56:51 +0900 Subject: [PATCH] static-files: Fix warning annotation (#344) --- docs/static-files.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/static-files.md b/docs/static-files.md index 60046b5..7522985 100644 --- a/docs/static-files.md +++ b/docs/static-files.md @@ -10,7 +10,9 @@ It is possible to serve static files with a custom path pattern and `NamedFile`. -:::warning Matching a path tail with the `[.*]` regex and using it to return a `NamedFile` has serious security implications. It offers the possibility for an attacker to insert `../` into the URL and access every file on the host that the user running the server has access to. ::: +:::warning +Matching a path tail with the `[.*]` regex and using it to return a `NamedFile` has serious security implications. It offers the possibility for an attacker to insert `../` into the URL and access every file on the host that the user running the server has access to. +::: ## Directory