Function is_under_sandbox_workspace

crates/openshell-cli/src/ssh.rs:880–882

Pure helper: is `path` equal to `/sandbox` or a descendant of it?

(path: &str)

/// Pure helper: is `path` equal to `/sandbox` or a descendant of it?
fn is_under_sandbox_workspace(path: &str) -> bool {
    path == SANDBOX_WORKSPACE_ROOT || path.starts_with(&format!("{SANDBOX_WORKSPACE_ROOT}/"))
}

/// Resolve every symlink in `sandbox_path` on the sandbox side and refuse the
/// result if it lands outside `/sandbox`.