mirror of
https://github.com/openclaw/openclaw.git
synced 2026-05-26 12:05:12 +00:00
[codex] Extract filesystem safety primitives (#77918)
* refactor: extract filesystem safety primitives * refactor: use fs-safe for file access helpers * refactor: reuse fs-safe for media reads * refactor: use fs-safe for image reads * refactor: reuse fs-safe in qqbot media opener * refactor: reuse fs-safe for local media checks * refactor: consume cleaner fs-safe api * refactor: align fs-safe json option names * fix: preserve fs-safe migration contracts * refactor: use fs-safe primitive subpaths * refactor: use grouped fs-safe subpaths * refactor: align fs-safe api usage * refactor: adapt private state store api * chore: refresh proof gate * refactor: follow fs-safe json api split * refactor: follow reduced fs-safe surface * build: default fs-safe python helper off * fix: preserve fs-safe plugin sdk aliases * refactor: consolidate fs-safe usage * refactor: unify fs-safe store usage * refactor: trim fs-safe temp workspace usage * refactor: hide low-level fs-safe primitives * build: use published fs-safe package * fix: preserve outbound recovery durability after rebase * chore: refresh pr checks
This commit is contained in:
committed by
GitHub
parent
61481eb34f
commit
538605ff44
@@ -1,4 +1,5 @@
|
||||
import path from "node:path";
|
||||
import { isPathInside } from "../infra/path-guards.js";
|
||||
import { shortenHomeInString } from "../utils.js";
|
||||
import type { PluginRecord } from "./registry.js";
|
||||
import type { PluginSourceRoots } from "./roots.js";
|
||||
@@ -6,19 +7,13 @@ export { resolvePluginSourceRoots } from "./roots.js";
|
||||
export type { PluginSourceRoots } from "./roots.js";
|
||||
|
||||
function tryRelative(root: string, filePath: string): string | null {
|
||||
if (!isPathInside(root, filePath)) {
|
||||
return null;
|
||||
}
|
||||
const rel = path.relative(root, filePath);
|
||||
if (!rel || rel === ".") {
|
||||
return null;
|
||||
}
|
||||
if (rel === "..") {
|
||||
return null;
|
||||
}
|
||||
if (rel.startsWith(`..${path.sep}`) || rel.startsWith("../") || rel.startsWith("..\\")) {
|
||||
return null;
|
||||
}
|
||||
if (path.isAbsolute(rel)) {
|
||||
return null;
|
||||
}
|
||||
// Normalize to forward slashes for display (path.relative uses backslashes on Windows)
|
||||
return rel.replaceAll("\\", "/");
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user