Function sanitizePath

pkg/parser/import_cache.go:24–31

sanitizePath converts a file path to a safe filename by using filepath.Clean and replacing directory separators with underscores

(path string)

// sanitizePath converts a file path to a safe filename by using filepath.Clean
// and replacing directory separators with underscores
func sanitizePath(path string) string {
	// Clean the path to remove any ".." or other suspicious elements
	cleaned := filepath.Clean(path)
	// Replace directory separators with underscores to create a flat filename
	// This prevents directory traversal while preserving path uniqueness
	sanitized := strings.ReplaceAll(cleaned, string(filepath.Separator), "_")
	return sanitized
}

// validatePathComponents validates that path components don't contain malicious sequences
func validatePathComponents(owner, repo, path, sha string) error {