Fix code quality violations and add VS Code extension features
Fix VS Code extension storage paths for new directory structure Fix jqhtml compiled files missing from bundle Fix bundle babel transformation and add rsxrealpath() function 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
@@ -391,6 +391,7 @@ class AssetHandler
|
||||
*/
|
||||
protected static function __find_public_directory($full_path)
|
||||
{
|
||||
// @REALPATH-EXCEPTION - Security: path traversal prevention requires symlink resolution
|
||||
$real_path = realpath($full_path);
|
||||
if (!$real_path) {
|
||||
return null;
|
||||
@@ -398,6 +399,7 @@ class AssetHandler
|
||||
|
||||
// Find the public directory that contains this file
|
||||
foreach (static::$public_directories as $directory) {
|
||||
// @REALPATH-EXCEPTION - Security: path traversal prevention requires symlink resolution
|
||||
$real_directory = realpath($directory);
|
||||
if ($real_directory && str_starts_with($real_path, $real_directory)) {
|
||||
return $real_directory;
|
||||
@@ -477,6 +479,7 @@ class AssetHandler
|
||||
*/
|
||||
protected static function __is_safe_path($path)
|
||||
{
|
||||
// @REALPATH-EXCEPTION - Security: path traversal prevention requires symlink resolution
|
||||
$real_path = realpath($path);
|
||||
|
||||
if ($real_path === false) {
|
||||
@@ -485,6 +488,7 @@ class AssetHandler
|
||||
|
||||
// Check if real path is within any allowed directory
|
||||
foreach (static::$public_directories as $directory) {
|
||||
// @REALPATH-EXCEPTION - Security: path traversal prevention requires symlink resolution
|
||||
$real_directory = realpath($directory);
|
||||
|
||||
if (str_starts_with($real_path, $real_directory)) {
|
||||
|
||||
Reference in New Issue
Block a user