fix: scope file access restrictions and honor custom data directories

2026-10-16 22:35:32 +08:00 · 2026-09-30 21:21:35 +08:00
parent 93d7ec69dc
commit 3d2b98a442
4 changed files with 192 additions and 13 deletions
@@ -19,7 +19,7 @@ export default class ConfigService {
    const resolved = resolveFileAccess(
      scriptFile ? config.scriptPath : config.configPath,
      [scriptFile ? filePath.slice('data/scripts/'.length) : filePath],
-      config.blackFileList,
+      scriptFile ? [] : config.blackFileList,
    );
    if (!resolved) {
      return res.send({ code: 403, message: t('文件无法访问') });