cc-haha/adapters/feishu/path-safety.ts

import * as path from 'node:path'

/** True if `filePath` resolves to a location outside of `workDir`.
 *  Relative paths are resolved against workDir first. */
export function isOutsideWorkDir(filePath: string, workDir: string): boolean {
  const pathApi = usesWindowsPath(filePath) || usesWindowsPath(workDir) ? path.win32 : path.posix
  const abs = pathApi.isAbsolute(filePath)
    ? pathApi.normalize(filePath)
    : pathApi.resolve(workDir, filePath)
  const normWork = stripTrailingSeparators(pathApi.normalize(workDir), pathApi)
  const relative = pathApi.relative(normWork, abs)
  return relative !== '' && (relative.startsWith('..') || pathApi.isAbsolute(relative))
}

function usesWindowsPath(value: string): boolean {
  return /^[a-zA-Z]:[\\/]/.test(value) || value.startsWith('\\\\')
}

function stripTrailingSeparators(value: string, pathApi: typeof path.posix | typeof path.win32): string {
  const root = pathApi.parse(value).root
  if (value === root) return value
  return value.replace(/[\\/]+$/, '')
}