Function isUnsafeAbsolutePath

src/lib/installPlugin.js:372–389

* Detects unsafe absolute paths in zip entries that should be ignored. * Treats leading '/' as absolute, Windows drive roots like 'C:/' as absolute, * and common Android/Linux device roots like '/data', '/root', '/system'. * @param {string} p

(p)

 * @param {string} p
 */
function isUnsafeAbsolutePath(p) {
	if (!p) return false;
	const s = String(p);
	if (/^[A-Za-z]:[\\\/]/.test(s)) return true; // Windows drive root
	if (s.startsWith("//")) return true; // network path
	if (s.startsWith("/")) {
		return (
			s.startsWith("/data") ||
			s.startsWith("/system") ||
			s.startsWith("/vendor") ||
			s.startsWith("/storage") ||
			s.startsWith("/sdcard") ||
			s.startsWith("/root") ||
			true // any leading slash is unsafe
		);
	}
	return false;
}

/**
 * Resolves Dependencies Manifest with given ids.