diff --git a/doc/api/path.md b/doc/api/path.md index e5d6fd7ef68304..8cce8bf2c56b2a 100644 --- a/doc/api/path.md +++ b/doc/api/path.md @@ -60,9 +60,9 @@ path.posix.basename('/tmp/myfile.html'); // Returns: 'myfile.html' ``` -On Windows Node.js follows the concept of per-drive working directory. +On Windows, Node.js follows the concept of per-drive working directory. This behavior can be observed when using a drive path without a backslash. For -example, `path.resolve('C:\\')` can potentially return a different result than +example, `path.resolve('C:\\')` can return a different result than `path.resolve('C:')`. For more information, see [this MSDN page][MSDN-Rel-Path]. @@ -322,7 +322,8 @@ added: v0.11.2 * Returns: {boolean} The `path.isAbsolute()` method determines if the literal `path` is absolute. -Therefore, it’s not safe for mitigating path traversals. +Therefore, it’s not safe for mitigating path traversals attacks. This method only checks whether a path is absolute and does not validate whether it is safe to use. + If the given `path` is a zero-length string, `false` will be returned.