Platform independent path validation

2024-08-17 14:59:55 +02:00 · 2024-08-17 14:59:55 +02:00 · 6615e2788a
commit 6615e2788a
parent 1f846bd5fe
1 changed files with 2 additions and 2 deletions
--- a/src/lib/index.ts
+++ b/src/lib/index.ts
@ -7,9 +7,9 @@ function safePath(basePath: string, name: string): boolean {
 	return (
 		!!relative &&
 		// does move out of `basePath`
-		!relative.startsWith('..') &&
+		!relative.startsWith(`..${path.sep}`) &&
 		// exactly one layer deep, e.g. no `./uplodas/foo/bar`
-		!relative.includes('/') &&
+		!relative.includes(path.sep) &&
 		// result is not an absolute path
 		!path.isAbsolute(relative)
 	);