木炎 23845413c5 fix: patch path traversal and baseUrl normalization in scene generator ...

- server.js: sanitize static file paths to prevent directory traversal
  (GET /../../sgclaw_config.json would expose API key)
- config-loader.js: fix normalizeBaseUrl to strip /v1 before appending,
  preventing double /v1 for non-standard base URLs

🤖 Generated with [Qoder][https://qoder.com]

2026-04-16 22:30:35 +08:00

6.9 KiB

Raw Blame History

View Raw