From 867046ee65998b6dec94a9fd538ccdbc2ce5d04e Mon Sep 17 00:00:00 2001
From: Daniel <845765@qq.com>
Date: Sun, 22 Feb 2026 17:53:52 +0800
Subject: [PATCH] :bug:
 https://github.com/siyuan-note/siyuan/issues/17079#issuecomment-3940610376

Signed-off-by: Daniel <845765@qq.com>
---
 kernel/cache/asset.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/kernel/cache/asset.go b/kernel/cache/asset.go
index 9dc63ea0e..05b83de8d 100644
--- a/kernel/cache/asset.go
+++ b/kernel/cache/asset.go
@@ -54,6 +54,11 @@ func SetAssetHash(hash, path string) {
 	assetHashLock.Lock()
 	defer assetHashLock.Unlock()
 
+	if !strings.HasPrefix(path, "assets/") {
+		logging.LogErrorf("invalid asset path [%s]", path)
+		return
+	}
+
 	assetHashCache[hash] = &AssetHash{Hash: hash, Path: path}
 	assetPathHashCache[path] = &AssetHash{Hash: hash, Path: path}
 }