参考所有分组，完成尽量多的内容：收紧 CMake 源列表参数守卫，结论测试通过

list-cmake-set-sources.sh

@@ -14,6 +14,14 @@ fi
 
 set_name=$1
 relative_prefix=${2:-}
+if ! [[ "$set_name" =~ ^[A-Za-z_][A-Za-z0-9_]*$ ]]; then
+    echo "CMake source set name must be a CMake variable name: $set_name" >&2
+    exit 1
+fi
+if [[ "$relative_prefix" = /* || "$relative_prefix" == .. || "$relative_prefix" == ../* || "$relative_prefix" == */.. || "$relative_prefix" == */../* ]]; then
+    echo "CMake source relative prefix must stay project-relative: $relative_prefix" >&2
+    exit 1
+fi
 
 awk -v set_name="$set_name" -v relative_prefix="$relative_prefix" '
     $0 ~ "^[[:space:]]*set\\(" set_name "([[:space:]]|$)" {