Function isPathAllowed

src/security/securityConfig.ts:87–95

* Check if resolved path is within allowed base paths

(resolvedPath: string, allowedBasePaths: string[])

 * Check if resolved path is within allowed base paths
 */
function isPathAllowed(resolvedPath: string, allowedBasePaths: string[]): boolean {
  if (allowedBasePaths.length === 0) return true;
  
  return allowedBasePaths.some(basePath => {
    const resolvedBasePath = path.resolve(basePath);
    return resolvedPath.startsWith(resolvedBasePath + path.sep) ||
           resolvedPath === resolvedBasePath;
  });
}

/**
 * Validate and sanitize file path to prevent path traversal attacks