Function assertWritableProjectPath

packages/cli/src/utils.ts:79–115

(filePath: string)

};

export const assertWritableProjectPath = (filePath: string): void => {
  const projectRoot = getRealPath(process.cwd());
  const targetPath = path.resolve(process.cwd(), filePath);

  if (!isInsidePath(targetPath, projectRoot)) {
    throw new Error(`Refusing to write outside project: ${filePath}`);
  }

  const parentPath = path.dirname(targetPath);
  const realParentPath = getRealPathOfNearestExistingAncestor(parentPath);

  if (!isInsidePath(realParentPath, projectRoot)) {
    throw new Error(
      `Refusing to write through directory outside project: ${filePath}`
    );
  }

  try {
    const targetStats =
      typeof lstatSync === "function" ? lstatSync(targetPath) : undefined;

    if (targetStats?.isSymbolicLink()) {
      throw new Error(`Refusing to write through symbolic link: ${filePath}`);
    }

    const realTargetPath = getRealPath(targetPath);
    if (!isInsidePath(realTargetPath, projectRoot)) {
      throw new Error(`Refusing to write outside project: ${filePath}`);
    }
  } catch (error) {
    if ((error as NodeJS.ErrnoException).code === "ENOENT") {
      return;
    }

    throw error;
  }
};

export const writeProjectFile = async (
  filePath: string,