Function ValidateAbsolutePath

pkg/fileutil/fileutil.go:37–55

ValidateAbsolutePath validates that a file path is absolute and safe to use. It performs the following security checks: - Cleans the path using filepath.Clean to normalize . and .. components - Verifies the path is absolute to prevent relative path traversal attacks Returns the cleaned absolute pat

(path string)

//
// content, err := os.ReadFile(cleanPath)
func ValidateAbsolutePath(path string) (string, error) {
	// Check for empty path
	if path == "" {
		fileutilLog.Print("ValidateAbsolutePath: rejected empty path")
		return "", errors.New("path cannot be empty")
	}

	// Sanitize the filepath to prevent path traversal attacks
	cleanPath := filepath.Clean(path)

	// Verify the path is absolute to prevent relative path traversal
	if !filepath.IsAbs(cleanPath) {
		fileutilLog.Printf("ValidateAbsolutePath: rejected relative path: %s", path)
		return "", fmt.Errorf("path must be absolute, got: %s", path)
	}

	fileutilLog.Printf("ValidateAbsolutePath: validated path: %s", cleanPath)
	return cleanPath, nil
}

// ValidatePathWithinBase checks that candidate is located within the base directory tree.
// Both paths are resolved via filepath.EvalSymlinks (with filepath.Abs as