| 75 | } |
| 76 | |
| 77 | func localPath(baseDir, filename string) (string, error) { |
| 78 | absBaseDir, err := filepath.Abs(baseDir) |
| 79 | if err != nil { |
| 80 | return "", fmt.Errorf("error resolving base directory %q: %w", baseDir, err) |
| 81 | } |
| 82 | |
| 83 | absFilename, err := filepath.Abs(filepath.Join(absBaseDir, filepath.Clean(filename))) |
| 84 | if err != nil { |
| 85 | return "", fmt.Errorf("error resolving path %q: %w", filename, err) |
| 86 | } |
| 87 | |
| 88 | rel, err := filepath.Rel(absBaseDir, absFilename) |
| 89 | if err != nil { |
| 90 | return "", fmt.Errorf("error checking path %q: %w", filename, err) |
| 91 | } |
| 92 | if rel == ".." || strings.HasPrefix(rel, ".."+string(filepath.Separator)) { |
| 93 | return "", fmt.Errorf("path escapes base directory %q: %q", absBaseDir, filename) |
| 94 | } |
| 95 | |
| 96 | return absFilename, nil |
| 97 | } |
| 98 | |
| 99 | func parseAndUpdateGoModFile(filename, packagePrefix, version string) (bool, error) { |
| 100 | fileData, err := os.ReadFile(filename) |