Function isSafeScriptName

pkg/workflow/safe_scripts.go:81–85

isSafeScriptName returns true if the script name is safe for use as a filename component. It rejects names that contain path separators or ".." sequences that could lead to path traversal when the generated filename is passed to require() at runtime.

(name string)

// It rejects names that contain path separators or ".." sequences that could lead to
// path traversal when the generated filename is passed to require() at runtime.
func isSafeScriptName(name string) bool {
	return !strings.Contains(name, "/") &&
		!strings.Contains(name, "\\") &&
		!strings.Contains(name, "..")
}

// buildCustomSafeOutputScriptsJSON builds a JSON mapping of custom safe output script names to their
// .cjs filenames, for use in the GH_AW_SAFE_OUTPUT_SCRIPTS env var of the handler manager step.