[hami9]

Found while testing v1.4.0 on a Galaxy S9. The static web server answered every unknown path with the entrypoint, so a missing asset came back as HTML with a 200:

GET /style.css    -> 200  text/css          (real file)
GET /missing.css  -> 200  text/html   <-- the index page
GET /nope.txt     -> 200  text/html   <-- the index page

A typo in an asset path broke the page silently. The SPA fallback is still right for routes (/dashboard), so it now applies only when the last path segment has no extension; anything that names a file resolves to that file, and a file that does not exist becomes a 404.

Path traversal still returns 403, HEAD still works, and non-GET/HEAD still returns 405 — unchanged.

New StaticWebRoutingTest locks in: entrypoint for / and for extension-less routes, real files for real paths, a non-existent file for /missing.css and /assets/nope.js, and null for paths escaping the source folder.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Bug Fixes

  • Missing requests for file paths now return a 404 instead of displaying the app’s entrypoint. Extensionless routes continue to load the entrypoint, and paths outside the web directory are refused.

• Tests

  • Added coverage for root routing, existing files, extensionless routes, missing files, and paths outside the web directory.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 272de1d4-08e5-4119-a064-a180e1918321

📥 Commits

Reviewing files that changed from the base of the PR and between ca765da and 159ced3.

📒 Files selected for processing (2)

• app/src/main/java/com/runcode/app/runtime/StaticWebEngine.kt
• app/src/test/java/com/runcode/app/runtime/StaticWebRoutingTest.kt

 _________________________________________
< Digging deeper than a Minecraft player. >
 -----------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       / 　 づ

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}