Function isSafeBashCommand

hooks_src/permission-request.js:75–79

(command)

  const canonicalBase = realpath(resolved);
  return path.resolve(canonicalBase, ...missing);
}

function isContainedPath(candidate, root) {
  const relative = path.relative(root, candidate);
  return relative === '' || (
    relative !== '..'
    && !relative.startsWith(`..${path.sep}`)
    && !path.isAbsolute(relative)