Function checkTraversal

internal/safeurl/safeurl.go:75–82

checkTraversal returns an error if any component is exactly "..". Such a component survives percent-encoding as a real path segment and would traverse the URL path. A single "." is left alone because it does not traverse and is a legitimate value in some paths.

(components []string)

// A single "." is left alone because it does not traverse and is a legitimate value
// in some paths.
func checkTraversal(components []string) error {
	for _, c := range components {
		if c == ".." {
			return fmt.Errorf("path component %q would traverse the URL path", c)
		}
	}
	return nil
}

func (u *MutableSafeURL) sealed() {}