fix(vfs): reject blank local paths (#1460)

陈家名 · web-flow · commit a3bee13ca9d9 · 2026-06-15T19:14:31.000+08:00
diff --git a/internal/validate/path_test.go b/internal/validate/path_test.go
@@ -26,6 +26,10 @@ func TestSafeOutputPath_RejectsPathTraversalAndDangerousInput(t *testing.T) {
 		{"unicode normal", "报告.xlsx", false},
 		{"dot-dot resolves to cwd", "subdir/..", false},
 
+		// ── GIVEN: empty or blank paths → THEN: rejected ──
+		{"empty path", "", true},
+		{"blank path", "   ", true},
+
 		// ── GIVEN: path traversal via .. → THEN: rejected ──
 		{"dot-dot escape", "../../.ssh/authorized_keys", true},
 		{"dot-dot mid path", "subdir/../../etc/passwd", true},
diff --git a/internal/vfs/localfileio/path.go b/internal/vfs/localfileio/path.go
@@ -60,6 +60,10 @@ func safePath(raw, flagName string) (string, error) {
 		return "", err
 	}
 
+	if strings.TrimSpace(raw) == "" {
+		return "", fmt.Errorf("%s must not be empty", flagName)
+	}
+
 	if isAbsolutePath(raw) {
 		return "", fmt.Errorf("%s must be a relative path within the current directory, got %q (hint: cd to the target directory first, or use a relative path like ./filename)", flagName, raw)
 	}
diff --git a/internal/vfs/localfileio/path_test.go b/internal/vfs/localfileio/path_test.go
@@ -26,6 +26,10 @@ func TestSafeOutputPath_RejectsPathTraversalAndDangerousInput(t *testing.T) {
 		{"unicode normal", "报告.xlsx", false},
 		{"dot-dot resolves to cwd", "subdir/..", false},
 
+		// ── GIVEN: empty or blank paths → THEN: rejected ──
+		{"empty path", "", true},
+		{"blank path", "   ", true},
+
 		// ── GIVEN: path traversal via .. → THEN: rejected ──
 		{"dot-dot escape", "../../.ssh/authorized_keys", true},
 		{"dot-dot mid path", "subdir/../../etc/passwd", true},

Original file line number	Diff line number	Diff line change
`@@ -60,6 +60,10 @@ func safePath(raw, flagName string) (string, error) {`
`60`	`60`	`return "", err`
`61`	`61`	`}`
`62`	`62`
	`63`	`+ if strings.TrimSpace(raw) == "" {`
	`64`	`+ return "", fmt.Errorf("%s must not be empty", flagName)`
	`65`	`+ }`
	`66`	`+`
`63`	`67`	`if isAbsolutePath(raw) {`
`64`	`68`	`return "", fmt.Errorf("%s must be a relative path within the current directory, got %q (hint: cd to the target directory first, or use a relative path like ./filename)", flagName, raw)`
`65`	`69`	`}`