From efef103c4d1760522f5941083781d6e4bb89137b Mon Sep 17 00:00:00 2001 From: MK Date: Mon, 13 Apr 2026 22:01:04 +0800 Subject: [PATCH] fix: replace var with let/const in isRealPathSafe to fix lint errors --- lib/utils.js | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/lib/utils.js b/lib/utils.js index 72c84ab..38974ae 100644 --- a/lib/utils.js +++ b/lib/utils.js @@ -36,14 +36,14 @@ function isRealPathSafe(targetPath, parentDir, realParentDir, callback) { return isPathWithinParent(p, parentDir) || isPathWithinParent(p, realParentDir); } - var relative = path.relative(parentDir, targetPath); - var segments = relative.split(path.sep); - var i = 0; - var current = parentDir; + const relative = path.relative(parentDir, targetPath); + const segments = relative.split(path.sep); + let i = 0; + let current = parentDir; function checkNext() { if (i >= segments.length) return callback(null, true); - var segment = segments[i++]; + const segment = segments[i++]; if (!segment || segment === '.') return checkNext(); current = path.join(current, segment); @@ -61,7 +61,7 @@ function isRealPathSafe(targetPath, parentDir, realParentDir, callback) { // Dangling symlink - check textual target return fs.readlink(current, function(err, linkTarget) { if (err) return callback(null, false); - var absTarget = path.resolve(path.dirname(current), linkTarget); + const absTarget = path.resolve(path.dirname(current), linkTarget); callback(null, isWithinParent(absTarget)); }); }