d8dfun/claudecodeui
1
0
Fork 0
mirror of https://github.com/siteboon/claudecodeui.git synced 2026-01-29 12:57:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: enforce WORKSPACES_ROOT in folder browser and folder creation

Browse Source
This commit is contained in:
Haileyesus
2026-01-28 22:12:20 +03:00
parent ede56ad81b
commit bbb51dbf99
3 changed files with 43 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
server/routes/projects.js
View File

@@ -13,7 +13,7 @@ function sanitizeGitError(message, token) {
}
// Configure allowed workspace root (defaults to user's home directory)
const WORKSPACES_ROOT = process.env.WORKSPACES_ROOT || os.homedir();
export const WORKSPACES_ROOT = process.env.WORKSPACES_ROOT || os.homedir();
// System-critical paths that should never be used as workspace directories
export const FORBIDDEN_PATHS = [
@@ -48,7 +48,7 @@ export const FORBIDDEN_PATHS = [
* @param {string} requestedPath - The path to validate
* @returns {Promise<{valid: boolean, resolvedPath?: string, error?: string}>}
*/
async function validateWorkspacePath(requestedPath) {
export async function validateWorkspacePath(requestedPath) {
try {
// Resolve to absolute path
let absolutePath = path.resolve(requestedPath);