INNER CODE UNIT · TypeScript
isSafePluginConfigPath
ZaxbyHub/opencode-swarm · src/cli/index.ts:290
export function isSafePluginConfigPath(
p: string,
configuredDir?: string,
): boolean {
const canonical = safeRealpathSync(p, p);
if (canonical === null) {
return false;
}
const resolved = path.resolve(canonical);
const home = path.resolve(os.homedir());
if (resolved === '/' || resolved === home || resolved.length <= home.length) {
return false;
}
// Depth floor (parity with isSafePromptsDir): reject a pathological
// XDG_CONFIG_HOME='/' which yields '/opencode/opencode-swarm.json'
// (2 components below root). Cross-platform via segmentDepthBelowRoot.
if (segmentDepthBelowRoot(resolved) < 3) {
return false;