Method resolve_path

atomic-core/src/output/filesystem/mod.rs:70–89

Resolve a relative path to an absolute path within the root. This method sanitizes the path to prevent directory traversal attacks. # Errors Returns an error if the path would escape the root.

(&self, relative: &str)

    ///
    /// Returns an error if the path would escape the root.
    pub fn resolve_path(&self, relative: &str) -> io::Result<PathBuf> {
        let path = self.root.join(relative);

        // Normalize the path to resolve .. and .
        let normalized = normalize_path(&path);

        // Ensure the normalized path is still under root
        if !normalized.starts_with(&self.root) {
            return Err(io::Error::new(
                io::ErrorKind::InvalidInput,
                format!(
                    "Path '{}' escapes root directory '{}'",
                    relative,
                    self.root.display()
                ),
            ));
        }

        Ok(normalized)
    }

    /// Check if a path exists.
    pub fn exists(&self, path: &str) -> bool {