rimraf params validate problem #326

Activity

1. abhu85

   added a commit that references this issue on Feb 23, 2026

   fix: reject empty or whitespace-only paths to prevent accidental cwd …

   ...

   This issue will close once commit 5cb3ec8 is merged into the 'main' branch.

   5cb3ec8
2. abhu85 commented on Feb 23, 2026

   

   abhu85

   on Feb 23, 2026

   More actions

   I've submitted a fix for this in #342.

   The root cause is that path.resolve('') returns process.cwd(), so an empty string silently becomes a valid path pointing to the current directory. The fix adds validation to reject empty and whitespace-only paths before they're resolved, throwing ERR_INVALID_ARG_VALUE with a clear error message.

   This is consistent with how rimraf already validates other dangerous inputs (null bytes, root directory).
3. isaacs

   added 4 commits that reference this issue on Mar 4, 2026

   mimic node's intended behavior with weird paths

   ...

   This issue will close once commit b684074 is merged into the 'main' branch.

   b684074

   mimic node's intended behavior with weird paths

   ...

   This issue will close once commit 59359ac is merged into the 'main' branch.

   59359ac

   mimic node's intended behavior with weird paths

   ...

   This issue will close once commit cce8085 is merged into the 'main' branch.

   cce8085

   mimic node's intended behavior with weird paths

   ...

   This issue will close once commit 5f57697 is merged into the 'main' branch.

   5f57697