# Harden attachment materialization and static file path handling · screen/t3code-personal

[View on GitCafe](https://git.cafe/screen/t3code-personal/commit/b5188e8ceaee3940d2fb3cd88c8fc2121fef1ae7)

Repository: [screen/t3code-personal](https://git.cafe/screen/t3code-personal)

Visibility: public

Requested revision: b5188e8ceaee3940d2fb3cd88c8fc2121fef1ae7

Requested commit: b5188e8ceaee3940d2fb3cd88c8fc2121fef1ae7

Commit: b5188e8ceaee3940d2fb3cd88c8fc2121fef1ae7

Tree: 7b6e3246022b3f1b868bb10ec869c317551928ec

Author: Julius Marminge

Committer: Julius Marminge

## Message

```
Harden attachment materialization and static file path handling

- Materialize only valid image data URLs and restrict inferred file extensions to a safe whitelist
- Preserve existing message attachments on upsert unless explicitly replaced or cleared
- Serve static `/` via `index.html` and block traversal attempts in static file requests

```

## Parents

- [992db1658633ff268be5d1167634966ae63ed859](https://git.cafe/screen/t3code-personal/commit/992db1658633ff268be5d1167634966ae63ed859?format=markdown)

[Source at this commit](https://git.cafe/screen/t3code-personal/tree/b5188e8ceaee3940d2fb3cd88c8fc2121fef1ae7?format=markdown)