Commit 0f4287f
committed
bump version to 0.0.210
Changes since 0.0.209:
- fix(mcp): write_acl now writes a host-portable relative acl:accessTo that
resolves to the correct resource. Previously it hardcoded './', which
resolves against the .acl's base URL (the parent container) — so a
*resource* ACL targeted the container instead of the resource, leaving
the resource with zero matching authorizations and locking out even the
owner who had just granted themselves Control. './' is kept for
containers and './<basename>' is used for resources. The lockout safety
net is hardened to also require an authorization that applies to the
target (with distinct errors for "not granted Control" vs "granted but
does not apply here"), and a resource-level regression test is added.
(JavaScriptSolidServer#576, closes JavaScriptSolidServer#575; reported by @NilsBM)1 parent 3660b96 commit 0f4287f
2 files changed
Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | 2 | | |
3 | | - | |
| 3 | + | |
4 | 4 | | |
5 | 5 | | |
6 | 6 | | |
| |||
0 commit comments