wrangler: reject cross-drive module paths

[staticpayload]

Summary

• handle Windows drive-letter module paths without mis-parsing the drive colon
• reject cross-drive module paths that would bypass project-root validation
• add win32-focused test coverage

Testing

• pnpm -C /Users/staticpayload/workers-sdk -F @cloudflare/workers-utils build
• pnpm -C /Users/staticpayload/workers-sdk -F wrangler test -- src/tests/pages/routes-module.test.ts

• Tests
  • Tests included/updated
  • Tests not necessary because:
• Public documentation
  • Cloudflare docs PR(s):
  • Documentation not necessary because: bug fix

---

[changeset-bot]

🦋 Changeset detected

Latest commit: b4e5830

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[workers-devprod]

Codeowners approval required for this PR:

• ✅ @cloudflare/wrangler

Show detailed file reviewers

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 3 additional findings.

[pkg-pr-new]

create-cloudflare

npm i https://pkg.pr.new/create-cloudflare@11888

@cloudflare/kv-asset-handler

npm i https://pkg.pr.new/@cloudflare/kv-asset-handler@11888

miniflare

npm i https://pkg.pr.new/miniflare@11888

@cloudflare/pages-shared

npm i https://pkg.pr.new/@cloudflare/pages-shared@11888

@cloudflare/unenv-preset

npm i https://pkg.pr.new/@cloudflare/unenv-preset@11888

@cloudflare/vite-plugin

npm i https://pkg.pr.new/@cloudflare/vite-plugin@11888

@cloudflare/vitest-pool-workers

npm i https://pkg.pr.new/@cloudflare/vitest-pool-workers@11888

@cloudflare/workers-editor-shared

npm i https://pkg.pr.new/@cloudflare/workers-editor-shared@11888

wrangler

npm i https://pkg.pr.new/wrangler@11888

commit: b4e5830

[petebacondarwin]

Thanks @staticpayload for creating this PR.
I have made a number of fixups and I think it is now in a good place to land.

The main changes were to avoid hard coded regex for drive handling, and more comprehensive checking of the corner cases.