Dirk Hoffmann

This solves the problem: Remove the session from the middleware and initialize the session in the $beforeRouteInit() method ``` $beforeRoutesInit(): void { $log.info("beforeRoutesInit call") this.app.use(session({ secret: "thisShouldBeLongAndSecret", resave: false, saveUninitialized:...

I see! Maybe, we let users only allow to add relative paths to there home directory. But then, we need to take care of relative paths pointing to a parent...

I think it's not a good idea to ignore any setting. There are some use cases where it makes total sense. Most enterprises host a dedicated or a shared repo....

Yes, exactly! You need manual tasks to do so. Some projects even checkin the settings.xml in the repo, with the part to copy and paste to the users settings.xml. But...