diff --git a/web/logic/interactive.py b/web/logic/interactive.py index 89881a3..077844b 100644 --- a/web/logic/interactive.py +++ b/web/logic/interactive.py @@ -31,6 +31,12 @@ class BridgeHandler(http.server.SimpleHTTPRequestHandler): # Read last 50 lines for better context during errors self.wfile.write("".join(f.readlines()[-50:]).encode()) return + + # Restrict static file access to specific directories only + if not any(self.path.startswith(prefix) for prefix in ['/pages', '/media']): + self.send_error(403, "Access Denied: Resource is restricted.") + return + return http.server.SimpleHTTPRequestHandler.do_GET(self) def do_POST(self): diff --git a/web/pages/configuration.html b/web/pages/configuration.html index 4b9e17f..c12eb32 100644 --- a/web/pages/configuration.html +++ b/web/pages/configuration.html @@ -13,7 +13,7 @@ - + @@ -36,7 +36,7 @@ - + NUMBUS @@ -70,21 +70,21 @@ - + Numbus Backup Server Backup all Numbus devices and monitor your servers. - + Numbus Computer Backup all Numbus devices and monitor your servers. - + Numbus TV Your TV, your way. No spying on you. diff --git a/web/pages/index.html b/web/pages/index.html index 4c81cbf..da0b3d0 100644 --- a/web/pages/index.html +++ b/web/pages/index.html @@ -12,7 +12,7 @@ - +
Backup all Numbus devices and monitor your servers.
Your TV, your way. No spying on you.