CalvinBackup/gstack
1
0
Fork 0
mirror of https://github.com/garrytan/gstack.git synced 2026-09-22 04:40:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(gstack2): harden integrated runtime verification

Browse Source
This commit is contained in:
Sinabina
2026-07-21 12:29:01 -07:00
parent 09492d34b4
commit 37144e8b05
24 changed files with 2032 additions and 3313 deletions
Download Patch File Download Diff File Expand all files Collapse all files
browse/test/path-validation.test.ts
+3 -2
View File
@@ -4,7 +4,7 @@ import { validateReadPath, SENSITIVE_COOKIE_NAME, SENSITIVE_COOKIE_VALUE } from
import { BLOCKED_METADATA_HOSTS } from '../src/url-validation';
import { readFileSync, symlinkSync, unlinkSync, writeFileSync, realpathSync } from 'fs';
import { tmpdir } from 'os';
import { join } from 'path';
import { join, relative } from 'path';
describe('validateOutputPath', () => {
it('allows paths within /tmp', () => {
@@ -82,7 +82,8 @@ describe('validateReadPath', () => {
});
it('blocks nested path traversal', () => {
expect(() => validateReadPath('src/../../etc/passwd')).toThrow(/Path must be within/);
const escapeToEtc = relative(process.cwd(), '/etc/passwd');
expect(() => validateReadPath(`src/../${escapeToEtc}`)).toThrow(/Path must be within/);
});
it('blocks symlink inside safe dir pointing outside', () => {