Skip to content

VBC-019: absolute-paths

error

Category: core
Analysis: Regex (line by line)
File types: .js, .ts, .tsx, .py, .sh, .astro
Scope: string and template literals only
Excluded paths: **/test/**, **/tests/**, **/__tests__/**, **/testdata/**, **/fixtures/**, **/test_*.py, **/*_test.py, **/test.py, **/conftest.py, **/*_test.go, **/*_bench.go, **/*.test.*, **/*.spec.*, **/bench/**, **/benchmark*, **/*corpus*, **/*payload*
Tags: security portability

What it reports

Hardcoded absolute path '{match}' detected at line {line}. This breaks system portability and leaks local structure.

Flagged

js
const home = '/Users/fab/project';
js
const win = 'C:\\Users\\fab';

Not flagged

js
const home = path.join(os.homedir(), 'project');

Pattern

regex
['"]/Users/|['"]/home/|['"]C:\\

Released under the MIT License.