From 5f1b7df5d0358dbe017b7a6153daa09f5f71dbf0 Mon Sep 17 00:00:00 2001
From: bashrc <bob@libreserver.org>
Date: Thu, 5 Feb 2026 10:35:59 +0000
Subject: [PATCH] Check file endings

---
 utils.py | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/utils.py b/utils.py
index 229b09d0a..d779e4042 100644
--- a/utils.py
+++ b/utils.py
@@ -4003,6 +4003,15 @@ def check_bad_path(path: str):
         print('WARN: this is not wordpress ' + path)
         return True
 
+    if path_lower.endswith('.js') or \
+       path_lower.endswith('.php') or \
+       path_lower.endswith('.bak') or \
+       path_lower.endswith('.env') or \
+       path_lower.endswith('.local') or \
+       path_lower.endswith('.yml'):
+        print('WARN: bad path ' + path)
+        return True
+
     if string_contains(path_lower, bad_strings):
         print('WARN: bad path ' + path)
         return True