Function isWithinDirectory

src/runtime/files/metadata.ts:29–32

(parentDir: string, targetPath: string)

}

export function isWithinDirectory(parentDir: string, targetPath: string): boolean {
  const relativePath = path.relative(path.resolve(parentDir), path.resolve(targetPath));
  return relativePath !== ".." && !relativePath.startsWith(`..${path.sep}`) && !path.isAbsolute(relativePath);
}