From 349234e3d5d92c05cec90689a810cc0876eaca15 Mon Sep 17 00:00:00 2001
From: Trezy <tre@trezy.com>
Date: Wed, 4 Mar 2026 16:50:35 -0600
Subject: [PATCH] fix: prevent validation error when attempting to concat with
 env vars in lua scripts

---
 src/lua/sandbox.rs | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/src/lua/sandbox.rs b/src/lua/sandbox.rs
index ef278e6..110ff96 100644
--- a/src/lua/sandbox.rs
+++ b/src/lua/sandbox.rs
@@ -87,9 +87,19 @@ pub fn create_sandbox() -> LuaResult<Lua> {
 /// Validate that a script compiles and defines a `handle` function.
 pub fn validate_script(source: &str) -> Result<(), String> {
     let lua = create_sandbox().map_err(|e| format!("failed to create Lua VM: {e}"))?;
-    // Set an empty env table so scripts that reference env.* at the top level don't fail.
+    // Set a stub env table that returns "" for any missing key so scripts
+    // that do top-level concatenation (e.g. `env.URL .. "/path"`) don't fail.
+    let env_stub = lua.create_table().unwrap();
+    let meta = lua.create_table().unwrap();
+    meta.set(
+        "__index",
+        lua.create_function(|_, (_t, _k): (mlua::Value, mlua::Value)| Ok("".to_string()))
+            .unwrap(),
+    )
+    .unwrap();
+    let _ = env_stub.set_metatable(Some(meta));
     lua.globals()
-        .set("env", lua.create_table().unwrap())
+        .set("env", env_stub)
         .map_err(|e| format!("failed to set env stub: {e}"))?;
     lua.load(source)
         .exec()
-- 
2.51.2