Function validateImportPath

packages/core/src/utils/memoryImportProcessor.ts:404–419

(
  importPath: string,
  basePath: string,
  allowedDirectories: string[],
)

}

export function validateImportPath(
  importPath: string,
  basePath: string,
  allowedDirectories: string[],
): boolean {
  // Reject URLs
  if (/^(file|https?):\/\//.test(importPath)) {
    return false;
  }

  const resolvedPath = path.resolve(basePath, importPath);

  return allowedDirectories.some((allowedDir) =>
    isSubpath(allowedDir, resolvedPath),
  );
}