Skip to content

lightgun-poc / lib/static / safeResolve

Function: safeResolve()

safeResolve(root, urlPath): string | null

Defined in: lib/static.ts:44

Maps a request URL to a file inside root, or null if it escapes root (path traversal guard — defense-in-depth behind Node's own request validation; a past design requirement, keep it).

Parameters

root

string

urlPath

string

Returns

string | null

Released under the MIT License.