mirror of
https://github.com/storytold/figcraft.git
synced 2026-11-13 13:52:34 +00:00
The assets of a plugin folder were read through whatever links they pointed at, so a folder handed to the publisher could put any file the publisher can read into the bundle the directory then serves to everyone. A linked asset, or a linked assets folder, is refused by name before anything is sent.