# Serve no image under an unsafe strategy folder; refuse trailing dots · dara/icarus

[View on GitCafe](https://git.cafe/dara/icarus/commit/79ba772af610c94ad4aacc232a7d491b2979a67f)

Repository: [dara/icarus](https://git.cafe/dara/icarus)

Visibility: public

Requested revision: 79ba772af610c94ad4aacc232a7d491b2979a67f

Requested commit: 79ba772af610c94ad4aacc232a7d491b2979a67f

Commit: 79ba772af610c94ad4aacc232a7d491b2979a67f

Tree: 4b5fbf6134492860874c01e24509dbe652743312

Author: Dara Adedeji

Committer: Dara Adedeji

## Message

```
Serve no image under an unsafe strategy folder; refuse trailing dots

Astra's second review: a strategy made under a path-like id between the
production check and this deploy would keep working, because only creation
checked the id. The serve check now takes the strategy too, so an image is
handed out to download only when its folder and file name are both safe.
Ids also refuse a trailing dot or space, which Windows drops ("<id>." is the
same folder as "<id>").

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

```

## Parents

- [5d270782463807cf9d0e8dd56e9eb063085f7737](https://git.cafe/dara/icarus/commit/5d270782463807cf9d0e8dd56e9eb063085f7737?format=markdown)

[Source at this commit](https://git.cafe/dara/icarus/tree/79ba772af610c94ad4aacc232a7d491b2979a67f?format=markdown)