dave
02/16/2021, 3:53 PMResourceLoader.Directory()
, allowing the serving of assets from outside the root directory. This class is generally used in "dev hot reload" mode (as opposed to loading from ResourceLoader.Classpath()
which is done in deployments), but it's good practice to keep on top of these things, so we are recommending that everyone upgrade. Also, there is a lesson here about sanitising your inputs... 🙃
Here is the release note for v4.3.2.2: https://github.com/http4k/http4k/releases/tag/4.3.2.2
Here is the issue: https://github.com/http4k/http4k/issues/580
And the commit with the fix, so you can understand what has changed: https://github.com/http4k/http4k/commit/c24512c060a6b0d544f03056010d706303e47285
Any questions, please just let us know.