From 3e917aa10501876433affef2247359987803c881 Mon Sep 17 00:00:00 2001
From: Adithya KP <adithyakp86@gmail.com>
Date: Fri, 1 May 2026 10:05:11 +0530
Subject: [PATCH] Fix security issue: Serve static files from public directory

---
 favicon.ico => public/favicon.ico | Bin
 robots.txt => public/robots.txt   |   0
 script.js => public/script.js     |   0
 styles.css => public/styles.css   |   0
 server.js                         |   2 +-
 5 files changed, 1 insertion(+), 1 deletion(-)
 rename favicon.ico => public/favicon.ico (100%)
 rename robots.txt => public/robots.txt (100%)
 rename script.js => public/script.js (100%)
 rename styles.css => public/styles.css (100%)

diff --git a/favicon.ico b/public/favicon.ico
similarity index 100%
rename from favicon.ico
rename to public/favicon.ico
diff --git a/robots.txt b/public/robots.txt
similarity index 100%
rename from robots.txt
rename to public/robots.txt
diff --git a/script.js b/public/script.js
similarity index 100%
rename from script.js
rename to public/script.js
diff --git a/styles.css b/public/styles.css
similarity index 100%
rename from styles.css
rename to public/styles.css
diff --git a/server.js b/server.js
index fbe7cb0..de73440 100644
--- a/server.js
+++ b/server.js
@@ -19,7 +19,7 @@ app.use(morgan('combined', {
 }));
 app.use(express.json());
 app.use(express.urlencoded({ extended: true }));
-app.use(express.static(path.join(__dirname)));
+app.use(express.static(path.join(__dirname, 'public')));
 
 // Rate Limiting: Max 5 contact form submissions per hour per IP
 const contactLimiter = rateLimit({