Skip to content

fix(fe): Security mitigation for CVE-2024-45811 - #2279

Merged
mamartinezmejia merged 8 commits into
mainfrom
fix/fe/CVE-2024-45811
Jun 17, 2026
Merged

fix(fe): Security mitigation for CVE-2024-45811#2279
mamartinezmejia merged 8 commits into
mainfrom
fix/fe/CVE-2024-45811

Conversation

@mamartinezmejia

@mamartinezmejia mamartinezmejia commented Jun 16, 2026 •
edited by github-actions Bot
Loading

Copy link
Copy Markdown
Collaborator

Thanks for the PR!

Deployments, as required, will be available below:
Any successful deployments (not always required) will be available here

Please create PRs in draft mode. Mark as ready to enable:

After merge, new images are deployed in:

Copilot AI review requested due to automatic review settings June 16, 2026 22:28
@github-actions

github-actions Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

There is no coverage information present for the Files changed

Copilot AI reviewed Jun 16, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adds a Vite dev-server filesystem access configuration intended to mitigate CVE-2024-45811 (Windows alternate-path bypass of server.fs.deny) by tightening which files/directories can be served.

Changes:

  • Adds server.fs.deny and server.fs.allow entries in the Vite config.
  • Restricts dev-server file serving to src/, public/, and index.html.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread frontend/vite.config.ts Outdated
@github-actions

github-actions Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

There is no coverage information present for the Files changed

@github-actions

github-actions Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

There is no coverage information present for the Files changed

@github-actions

github-actions Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

There is no coverage information present for the Files changed

@github-actions

github-actions Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

There is no coverage information present for the Files changed

@github-actions

github-actions Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

There is no coverage information present for the Files changed

@github-actions

github-actions Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

There is no coverage information present for the Files changed

@github-actions

github-actions Bot commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

There is no coverage information present for the Files changed

@mamartinezmejia
mamartinezmejia enabled auto-merge (squash) June 17, 2026 15:17
@mamartinezmejia
mamartinezmejia merged commit 0352573 into main Jun 17, 2026
55 of 58 checks passed
@mamartinezmejia
mamartinezmejia deleted the fix/fe/CVE-2024-45811 branch June 17, 2026 15:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@paulushcgcj paulushcgcj paulushcgcj approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@mamartinezmejia @paulushcgcj