try to block serving node files

GSA · Feb 6, 2025 · 515419e · 515419e
1 parent d16eb70
commit 515419e
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/app/__init__.py b/app/__init__.py
@@ -372,6 +372,11 @@ def record_start_time():
         g.start = monotonic()
         g.endpoint = request.endpoint
 
+    @application.before_request
+    def block_serving_node_files():
+        if "node_modules" in request.path:
+            abort(403)
+
     @application.context_processor
     def inject_global_template_variables():
         return {