Function validatePathWithinProject

test/unit/electron/index.js:272–288

* Validates that a file path is within the project root for security purposes. * @param {string} filePath - The file path to validate * @throws {Error} If the path is outside the project root

(filePath)

	 * @throws {Error} If the path is outside the project root
	 */
	function validatePathWithinProject(filePath) {
		const projectRoot = path.join(__dirname, '../../..');
		const resolvedPath = path.resolve(filePath);
		const normalizedRoot = path.resolve(projectRoot);

		// On Windows, paths are case-insensitive
		const isWindows = process.platform === 'win32';
		const rel = path.relative(
			isWindows ? normalizedRoot.toLowerCase() : normalizedRoot,
			isWindows ? resolvedPath.toLowerCase() : resolvedPath
		);
		if (rel.startsWith('..') || path.isAbsolute(rel)) {
			const error = new Error(`Access denied: Path '${filePath}' is outside the project root`);
			console.error(error.message);
			throw error;
		}
	}

	// Handle file reading for tests
	ipcMain.handle('vscode:readFile', async (event, filePath) => {