fix: scope file access restrictions and honor custom data directories

back/services/config.ts

@@ -19,7 +19,7 @@ export default class ConfigService {
     const resolved = resolveFileAccess(
       scriptFile ? config.scriptPath : config.configPath,
       [scriptFile ? filePath.slice('data/scripts/'.length) : filePath],
-      config.blackFileList,
+      scriptFile ? [] : config.blackFileList,
     );
     if (!resolved) {
       return res.send({ code: 403, message: t('文件无法访问') });

back/services/log.ts

@@ -1,5 +1,4 @@
 import { resolveFileAccess } from '../shared/fileAccess';
-import path from 'path';
 import { Inject, Service } from 'typedi';
 import winston from 'winston';
 import config from '../config';
@@ -9,10 +8,6 @@ export default class LogService {
   constructor(@Inject('logger') private logger: winston.Logger) {}
 
   public checkFilePath(filePath: string, fileName: string) {
-    return resolveFileAccess(
-      config.logPath,
-      [filePath || '', fileName],
-      config.blackFileList,
-    );
+    return resolveFileAccess(config.logPath, [filePath || '', fileName]);
   }
 }