CalvinBackup/gstack
1
0
Fork 0
mirror of https://github.com/garrytan/gstack.git synced 2026-09-21 12:20:48 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat: componentize GStack 2 runtime and release integrity

Browse Source
This commit is contained in:
Sinabina
2026-07-20 14:16:23 -07:00
parent b0ea2296d1
commit f14445bb00
270 changed files with 9681 additions and 51572 deletions
Download Patch File Download Diff File Expand all files Collapse all files
browse/test/path-validation.test.ts
+9 -3
View File
@@ -112,10 +112,16 @@ describe('validateReadPath', () => {
});
describe('validateOutputPath — symlink resolution', () => {
it('blocks symlink inside /tmp pointing outside safe dirs', () => {
const linkPath = join(tmpdir(), 'test-output-symlink-' + Date.now() + '.png');
it('blocks a dangling symlink inside /tmp pointing outside safe dirs', () => {
// Keep the link in the validator's canonical safe temp root instead of
// os.tmpdir(), which is /var/folders/... on default macOS test runs. The
// missing target makes this a regression test for realpathSync ENOENT.
const realTmp = realpathSync('/tmp');
const unique = `${process.pid}-${Date.now()}`;
const linkPath = join(realTmp, `test-output-dangling-${unique}.png`);
const missingTarget = `/etc/gstack-missing-output-${unique}`;
try {
symlinkSync('/etc/crontab', linkPath);
symlinkSync(missingTarget, linkPath);
expect(() => validateOutputPath(linkPath)).toThrow(/Path must be within/);
} finally {
try { unlinkSync(linkPath); } catch {}