2 Commits

Author	SHA1	Message	Date
木炎	23845413c5	fix: patch path traversal and baseUrl normalization in scene generator ... - server.js: sanitize static file paths to prevent directory traversal (GET /../../sgclaw_config.json would expose API key) - config-loader.js: fix normalizeBaseUrl to strip /v1 before appending, preventing double /v1 for non-standard base URLs 🤖 Generated with [Qoder][https://qoder.com]	2026-04-16 22:30:35 +08:00
木炎	ead9ea76fa	feat: add config-loader.js and initial server test ... Add config-loader.js module for loading sgclaw_config.json credentials and resolving project root directory. Add initial Rust source-guard test to verify server file paths exist. 🤖 Generated with [Qoder][https://qoder.com]	2026-04-16 22:10:48 +08:00