WP_REST_Plugins_Controller::sanitize_plugin_param( string $file )

Source

File: wp-includes/rest-api/endpoints/class-wp-rest-plugins-controller.php

public function sanitize_plugin_param( $file ) {
		return plugin_basename( sanitize_text_field( $file . '.php' ) );
	}