@mintlify/cli 4.0.905 → 4.0.907

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mintlify/cli",
-  "version": "4.0.905",
+  "version": "4.0.907",
   "description": "The Mintlify CLI",
   "engines": {
     "node": ">=18.0.0"
@@ -40,12 +40,12 @@
   },
   "dependencies": {
     "@inquirer/prompts": "7.9.0",
-    "@mintlify/common": "1.0.685",
-    "@mintlify/link-rot": "3.0.844",
+    "@mintlify/common": "1.0.687",
+    "@mintlify/link-rot": "3.0.846",
     "@mintlify/models": "0.0.259",
-    "@mintlify/prebuild": "1.0.821",
-    "@mintlify/previewing": "4.0.877",
-    "@mintlify/validation": "0.1.569",
+    "@mintlify/prebuild": "1.0.823",
+    "@mintlify/previewing": "4.0.879",
+    "@mintlify/validation": "0.1.571",
     "adm-zip": "0.5.16",
     "chalk": "5.2.0",
     "color": "4.2.3",
@@ -81,5 +81,5 @@
     "vitest": "2.0.4",
     "vitest-mock-process": "1.0.4"
   },
-  "gitHead": "2efb5fa0274b01851a78954c3b5c6057075a724f"
+  "gitHead": "4b4538c642352da583f06fe48443e4cdb85cd2d6"
 }

package/src/helpers.tsx

@@ -10,7 +10,7 @@ import {
   removeLastLog,
   LOCAL_LINKED_CLI_VERSION,
 } from '@mintlify/previewing';
-import { upgradeToDocsConfig } from '@mintlify/validation';
+import { upgradeToDocsConfig, validatePathWithinCwd } from '@mintlify/validation';
 import detect from 'detect-port';
 import fse from 'fs-extra';
 import fs from 'fs/promises';
@@ -165,13 +165,7 @@ export const suppressConsoleWarnings = (): void => {
 export const readLocalOpenApiFile = async (
   filename: string
 ): Promise<Record<string, unknown> | undefined> => {
-  const baseDir = process.cwd();
-  // const pathname = path.resolve(process.cwd(), filename);
-  const resolvedPath = path.resolve(baseDir, filename);
-  const relative = path.relative(baseDir, resolvedPath);
-  if (relative.startsWith('..') || path.isAbsolute(relative)) {
-    throw new Error('Access denied: invalid path');
-  }
+  const { resolvedPath } = validatePathWithinCwd(filename, CMD_EXEC_PATH);
   const file = await fs.readFile(resolvedPath, 'utf-8');
   const document = yaml.load(file) as Record<string, unknown> | undefined;
   return document;

package/src/init.tsx

@@ -1,19 +1,9 @@
 import { select, input } from '@inquirer/prompts';
 import { addLogs, addLog, SpinnerLog, removeLastLog } from '@mintlify/previewing';
-import { docsConfigSchema } from '@mintlify/validation';
+import { docsConfigSchema, validatePathWithinCwd } from '@mintlify/validation';
 import AdmZip from 'adm-zip';
 import fse from 'fs-extra';
 import { Box, Text } from 'ink';
-import path from 'path';
-
-const validatePathWithinCwd = (inputPath: string): void => {
-  const baseDir = process.cwd();
-  const resolvedPath = path.resolve(baseDir, inputPath);
-  const relative = path.relative(baseDir, resolvedPath);
-  if (relative.startsWith(`..${path.sep}`) || relative === '..' || path.isAbsolute(relative)) {
-    throw new Error(`Access denied: path "${inputPath}" is outside the current directory`);
-  }
-};
 
 const sendOnboardingMessage = (installDir: string) => {
   addLogs(
@@ -120,7 +110,7 @@ export async function init(
       }
       installDir = installDir === '.' ? subdir : `${installDir}/${subdir}`;
       // Re-validate after subdirectory is appended
-      validatePathWithinCwd(installDir);
+      validatePathWithinCwd(installDir, process.cwd());
     }
   }