Handle missing bridge port and path mapping

Main: add a guard that logs and returns if the bridge port is unavailable, avoiding attempts to load the renderer URL with an undefined port. Bridge module: when a route isn't mapped, join the requested pathname with the server cwd and normalize it (instead of always resolving) before the isUnderRootAsync check. This ensures paths are handled consistently and prevents incorrect resolution/permissions checks that could allow escapes from the expected root.

Author: EdenwareApps

www/nodejs/main.mjs

@@ -719,6 +719,10 @@ const initElectronWindow = async () => {
             console.error('❌ Bridge ready error:', err)
             return
         }
+        if (!port) {
+            console.error('❌ Bridge port unavailable, cannot load renderer')
+            return
+        }
         console.log('🌉 Bridge ready, loading URL on port:', port)
         window.loadURL('http://127.0.0.1:'+ port +'/renderer/electron.html', { userAgent: renderer.ui.ua })
         window.setAlwaysOnTop(true) // trick to take focus

www/nodejs/modules/bridge/bridge.js

@@ -131,8 +131,10 @@ class BridgeServer extends EventEmitter {
                 if (typeof (this.map[pathname]) != 'undefined') {
                     pathname = this.map[pathname]
                     mapped = true
+                } else {
+                    pathname = path.join(paths.cwd, pathname)
                 }
-                pathname = path.resolve(paths.cwd, pathname)
+                pathname = path.normalize(pathname)
                 if (!pathname || (!mapped && !await isUnderRootAsync(pathname, paths.cwd))) {
                     response.statusCode = 403;
                     response.end();