babel-preset-expo 55.0.21 → 55.0.22

package/build/common.js

@@ -149,11 +149,19 @@ function getBabelRuntimeVersion(caller) {
 function getExpoRouterAbsoluteAppRoot(caller) {
     assertExpoBabelCaller(caller);
     const rootModuleId = caller?.routerRoot ?? './app';
-    if (node_path_1.default.isAbsolute(rootModuleId)) {
-        return rootModuleId;
+    const projectRoot = getPossibleProjectRoot(caller);
+    const resolved = node_path_1.default.isAbsolute(rootModuleId)
+        ? rootModuleId
+        : node_path_1.default.join(projectRoot || '/', rootModuleId);
+    // Silently fall back to the default if the configured router root escapes the project root, as a safety net
+    if (projectRoot && !isPathInside(resolved, projectRoot)) {
+        return node_path_1.default.join(projectRoot, 'app');
     }
-    const projectRoot = getPossibleProjectRoot(caller) || '/';
-    return node_path_1.default.join(projectRoot, rootModuleId);
+    return resolved;
+}
+function isPathInside(child, parent) {
+    const relative = node_path_1.default.relative(parent, child);
+    return !!relative && !relative.startsWith('..') && !node_path_1.default.isAbsolute(relative);
 }
 function getInlineEnvVarsEnabled(caller) {
     assertExpoBabelCaller(caller);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "babel-preset-expo",
-  "version": "55.0.21",
+  "version": "55.0.22",
   "description": "The Babel preset for Expo projects",
   "main": "build/index.js",
   "files": [
@@ -44,7 +44,7 @@
     "@babel/runtime": "^7.20.0",
     "react-refresh": ">=0.14.0 <1.0.0",
     "expo": "*",
-    "expo-widgets": "^55.0.17"
+    "expo-widgets": "^55.0.19"
   },
   "peerDependenciesMeta": {
     "@babel/runtime": {
@@ -90,5 +90,5 @@
     "jest": "^29.2.1",
     "react-refresh": "^0.14.2"
   },
-  "gitHead": "7c081282cf88968f81732feb67a71840e769a40f"
+  "gitHead": "fcb091766242d53248cd3c5949965961dbc5ec1d"
 }