added theoretical path traversal security, and fixed assets url

2026-02-23 23:53:45 +01:00
parent 6111096a8c
commit c9697b1778
2 changed files with 14 additions and 2 deletions
--- a/templates/page.html
+++ b/templates/page.html
@@ -15,7 +15,7 @@
    <aside class="wiki-sidebar">
        {% if main_image %}
        <div class="sidebar-image">
-            <img src="{% if is_static %}{{ main_image }}{% else %}/assets/{{ main_image }}{% endif %}" alt="{{ title }}">
+            <img src="{% if is_static %}{{ main_image }}{% else %}assets/{{ main_image }}{% endif %}" alt="{{ title }}">
        </div>
        {% endif %}