pathsafety

func CleanRelative ¶

func CleanRelative(raw string) (string, bool)

func IsInsideAny ¶

func IsInsideAny(targetPath string, roots []string) (bool, string, error)

func RelEntersGit ¶ added in v0.3.2

func RelEntersGit(rel string) bool

RelEntersGit reports whether any component of the OS-relative path rel is ".git", compared case-insensitively: on case-insensitive filesystems (macOS, Windows) ".GIT/config" reaches the same file as ".git/config". A .git directory holds repository metadata, credentials included (actions/checkout persists its token in .git/config by default), never render input.

func RelEscapes ¶

func RelEscapes(rel string) bool

func ResolveForContainment ¶

func ResolveForContainment(targetPath string) (string, error)

func SlashRelEscapes ¶

func SlashRelEscapes(rel string) bool