class LittleGhost::TrustedPath

Marks a caller-supplied prompt directory as trusted application code. Construction resolves symbolic links immediately and rejects paths that are missing or are not directories.

Security and trust

Construction is a trust assertion, not a sanitizer. It does not inspect ownership, permissions, or who can modify the directory. ERB templates run as Ruby inside the current process, so create TrustedPath values only from allowlisted, application-controlled, non-user-writable roots. Never wrap a path taken from unchecked request or model input.