Permit dashboard to open CSS and JS files

hydephp · Oct 26, 2023 · 3f6f3e8 · 3f6f3e8
1 parent 44a88bd
commit 3f6f3e8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/realtime-compiler/src/Http/DashboardController.php b/packages/realtime-compiler/src/Http/DashboardController.php
@@ -326,7 +326,7 @@ protected function openMediaFileInEditor(MediaFile $file): void
             $binary = $this->findGeneralOpenBinary();
             $path = $file->getAbsolutePath();
 
-            if (! in_array($file->getExtension(), ['png', 'svg', 'jpg', 'jpeg', 'gif', 'ico'])) {
+            if (! in_array($file->getExtension(), ['png', 'svg', 'jpg', 'jpeg', 'gif', 'ico', 'css', 'js'])) {
                 $this->abort(403, sprintf("Refusing to open unsafe file '%s'", basename($path)));
             }