Pilot filesystem root confinement for Tiny File Manager

Dockerfile

@@ -22,5 +22,8 @@ RUN docker-php-ext-install \
 WORKDIR /var/www/html
 
 COPY tinyfilemanager.php index.php
+COPY afs.php translation.json ./
+COPY lib ./lib
+COPY assets ./assets
 
 CMD ["sh", "-c", "php -S 0.0.0.0:80"]

README.md

@@ -7,7 +7,7 @@
 [![Paypal](https://img.shields.io/badge/Donate-Paypal-lightgrey.svg?style=flat-square)](https://www.paypal.me/prasathmani)
 ![GitHub Sponsors](https://img.shields.io/github/sponsors/prasathmani)
 
-> TinyFileManager is a versatile web-based PHP file manager designed for simplicity and efficiency. This lightweight single-file PHP application can be effortlessly integrated into any server directory, allowing users to store, upload, edit, and manage files and folders directly through their web browser.
+> TinyFileManager is a versatile web-based PHP file manager designed for simplicity and efficiency. This lightweight PHP application can be integrated into a server directory, allowing users to store, upload, edit, and manage files and folders directly through their web browser.
 With multi-language support and compatibility with PHP 5.5+, TinyFileManager enables the creation of individual user accounts, each with its dedicated directory. The platform also includes built-in functionality for handling text files using the Cloud9 IDE.
 Featuring syntax highlighting for over 150 languages and more than 35 themes, TinyFileManager offers a comprehensive solution for file management in an online environment.
 
@@ -33,9 +33,14 @@ Tinyfilemanager is highly documented on the [wiki pages](https://github.com/pras
 
 Download ZIP with latest version from master branch.
 
-Just copy the tinyfilemanager.php to your webspace - thats all :)
+Copy `tinyfilemanager.php`, `lib`, and `assets` to your webspace. The root-confinement library and hash-pinned local browser assets are required and must remain next to the script. Deployments serving assets from another same-origin path may set `$asset_base_url` in `config.php`.
 You can also change the file name from "tinyfilemanager.php" to something else, you know what i meant for.
 
+The compatibility-pilot profile intentionally disables server-side URL upload,
+recursive search, archive create/extract, remote viewers, active inline preview,
+and the Ace editor. Ordinary list, create, upload, edit, copy, move, rename,
+delete, and attachment download operations remain available.
+
 Default username/password: **admin/admin@123** and **user/12345**.
 
 :warning: Warning: Please set your own username and password in `$auth_users` before use. password is encrypted with <code>password_hash()</code>. to generate new password hash [here](https://tinyfilemanager.github.io/docs/pwd.html)