6b0ac15086
The URL parser resolves %2e%2e like .., so /{base}/assets/%2e%2e/api/...
passed assetAllowed and would load from outside the asset prefix. A
segment is now a dot segment after decoding %2e, in any case.
- tests/app/pluginAssets.test.ts covers the URL check, loadScript,
loadStyles, activateStyles and loadControllerAssets
- modules/boardwalk/dist rebuilt
16 lines
520 B
HTML
16 lines
520 B
HTML
<!doctype html>
|
|
<html lang="pl">
|
|
<head>
|
|
<meta charset="UTF-8" />
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
|
<meta name="robots" content="noindex, nofollow" />
|
|
<meta name="summer-admin-base" content="__SUMMER_ADMIN_BASE__" />
|
|
<title>SummerCMS</title>
|
|
<script type="module" crossorigin src="./assets/index-B51qJou6.js"></script>
|
|
<link rel="stylesheet" crossorigin href="./assets/index-CfeX_snf.css">
|
|
</head>
|
|
<body>
|
|
<div id="app"></div>
|
|
</body>
|
|
</html>
|