databricks-cli/libs/filer/workspace_root_path.go

package filer

import (
	"fmt"
	"path"
	"strings"
)

// WorkspaceRootPath can be joined with a relative path and ensures that
// the returned path is always a strict child of the root path.
type WorkspaceRootPath struct {
	rootPath string
}

// NewWorkspaceRootPath constructs and returns [RootPath].
// The named path is cleaned on construction.
func NewWorkspaceRootPath(name string) WorkspaceRootPath {
	return WorkspaceRootPath{
		rootPath: path.Clean(name),
	}
}

// Join returns the specified path name joined to the root.
// It returns an error if the resulting path is not a strict child of the root path.
func (p *WorkspaceRootPath) Join(name string) (string, error) {
	absPath := path.Join(p.rootPath, name)

	// Don't allow escaping the specified root using relative paths.
	if !strings.HasPrefix(absPath, p.rootPath) {
		return "", fmt.Errorf("relative path escapes root: %s", name)
	}

	return absPath, nil
}