Function _is_safe_relpath

tools/test_selector.py:276–284

Safety check for a git-relative path: no absolute, no traversal, no NUL.

(p: str)

def _is_safe_relpath(p: str) -> bool:
    """Safety check for a git-relative path: no absolute, no traversal, no NUL."""
    return (
        p
        and "\x00" not in p
        and not p.startswith("/")
        and not re.match(r"^[A-Za-z]:/", p)
        and ".." not in Path(p).parts
    )


def validate_selected_paths(res: SelectorResult, repo: Path) -> SelectorResult: