From ff450a57709bcb82f6fdcfad53832d8c79cab565 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= Date: Sun, 17 May 2026 14:43:35 +0200 Subject: [PATCH] Python bridge now works and serves files correctly. Only necessary folders are accessible from the browser. --- web/logic/interactive.py | 6 ++++++ web/pages/configuration.html | 10 +++++----- web/pages/index.html | 4 ++-- web/pages/preparation.html | 4 ++-- 4 files changed, 15 insertions(+), 9 deletions(-) diff --git a/web/logic/interactive.py b/web/logic/interactive.py index 89881a3..077844b 100644 --- a/web/logic/interactive.py +++ b/web/logic/interactive.py @@ -31,6 +31,12 @@ class BridgeHandler(http.server.SimpleHTTPRequestHandler): # Read last 50 lines for better context during errors self.wfile.write("".join(f.readlines()[-50:]).encode()) return + + # Restrict static file access to specific directories only + if not any(self.path.startswith(prefix) for prefix in ['/pages', '/media']): + self.send_error(403, "Access Denied: Resource is restricted.") + return + return http.server.SimpleHTTPRequestHandler.do_GET(self) def do_POST(self): diff --git a/web/pages/configuration.html b/web/pages/configuration.html index 4b9e17f..c12eb32 100644 --- a/web/pages/configuration.html +++ b/web/pages/configuration.html @@ -13,7 +13,7 @@ - + @@ -36,7 +36,7 @@