package cwhub import ( "fmt" "net/http" "path/filepath" "sort" "strings" "time" ) var hubClient = &http.Client{ Timeout: 120 * time.Second, } // safePath returns a joined path and ensures that it does not escape the base directory. func safePath(dir, filePath string) (string, error) { absBaseDir, err := filepath.Abs(filepath.Clean(dir)) if err != nil { return "", err } absFilePath, err := filepath.Abs(filepath.Join(dir, filePath)) if err != nil { return "", err } if !strings.HasPrefix(absFilePath, absBaseDir) { return "", fmt.Errorf("path %s escapes base directory %s", filePath, dir) } return absFilePath, nil } // SortItemSlice sorts a slice of items by name, case insensitive. func SortItemSlice(items []*Item) { sort.Slice(items, func(i, j int) bool { return strings.ToLower(items[i].Name) < strings.ToLower(items[j].Name) }) }