docs: note Vite fs deny hardening

~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
.git/COMMIT_EDITMSG [unix] (16:23 16/10/2026)                                                                                       1,1 All"/d/AI-Lab/Repos/gods-eye-view/.git/COMMIT_EDITMSG" [unix] 19L, 662B                                                               docs: note Vite fs deny hardening
This commit is contained in:
Blowing Raspberries authored and blowing-a-raspberry committed 2026-10-18 15:02:13 -05:00
1 parent 509ab57e4b
commit 0c1bb5a71b
1 file changed
+1
+1
View File
@@ -445,6 +445,7 @@
`ET-Client-Name: gods-eye-view-bikeshare` to Entur, as the operators ask, `ET-Client-Name: gods-eye-view-bikeshare` to Entur, as the operators ask,
and accepts Entur's extensionless feed paths. Attributed under NLOD and and accepts Entur's extensionless feed paths. Attributed under NLOD and
Licence Ouverte. `get_bike_share` covers the six systems too. Licence Ouverte. `get_bike_share` covers the six systems too.
- Harden Vite's filesystem deny list for local-only artifacts: repo `dist/`, `.gev-logs/`, and `.gev-cache/` are denied without blocking dependency `dist/` directories, and checkout paths containing glob metacharacters are escaped before building the root-anchored pattern.
- Add Norway's road cameras from Statens vegvesen as a CCTV pack. The camera - Add Norway's road cameras from Statens vegvesen as a CCTV pack. The camera
list is one keyless GeoJSON request to the agency's OGC API view of its list is one keyless GeoJSON request to the agency's OGC API view of its