Skip to content

serveStatic in 1.15.6 incorrectly handled filenames containing '.. ' file #1345

@JinJieBeWater

Description

@JinJieBeWater

Environment

System:
OS: Windows 11 10.0.26200
CPU: (20) x64 12th Gen Intel(R) Core(TM) i7-12700H
Memory: 2.57 GB / 15.63 GB
Binaries:
Node: 25.8.0 - C:\Program Files\nodejs\node.EXE
npm: 11.4.2 - C:\Program Files\nodejs\npm.CMD
pnpm: 10.32.0 - C:\Users\20030813\AppData\Local\pnpm\pnpm.CMD
bun: 1.3.10 - C:\Users\20030813.bun\bin\bun.EXE
Browsers:
Chrome: 146.0.7680.76
Edge: Chromium (133.0.3065.69)
Internet Explorer: 11.0.26100.7309

Reproduction

the issue is obvious

Describe the bug

serveStatic in 1.15.6 incorrectly handled filenames containing '.. ' file

Relevant commit

This causes Nuxt catch-all routes to stop working.

Related issue

I’d be happy to submit a small fix PR.

Additional context

No response

Logs

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingv1

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions