For AI agents: the complete documentation index is available at https://mfdoctor.kevinbeier.com/1.0.0/llms.txt, the full documentation bundle is available at https://mfdoctor.kevinbeier.com/1.0.0/llms-full.txt, and this page is available as Markdown at https://mfdoctor.kevinbeier.com/1.0.0/rules/config/filename-invalid.md.
MFDoctor
  • English
  • 1.0.0

      • config/filename-invalid

      • Category: security
      • Default severity: error

      Issue

      Unsafe paths can escape output layout; a non-JavaScript entry cannot run as a container.

      How to fix it

      Use a relative .js or .mjs filename without absolute or .. segments.

      Suppress or retarget with rules["config/filename-invalid"] set to "off" or a severity — see Suppressions and allowlists.

      Sources