Function TestValidateGitSubDir

pkg/remote/git_test.go:25–149

(t *testing.T)

)

func TestValidateGitSubDir(t *testing.T) {
	base := "/tmp/cache/compose/abc123def456"

	tests := []struct {
		name    string
		subDir  string
		wantErr bool
	}{
		{
			name:    "valid simple directory",
			subDir:  "examples",
			wantErr: false,
		},
		{
			name:    "valid nested directory",
			subDir:  "examples/nginx",
			wantErr: false,
		},
		{
			name:    "valid deeply nested directory",
			subDir:  "examples/web/frontend/config",
			wantErr: false,
		},
		{
			name:    "valid current directory",
			subDir:  ".",
			wantErr: false,
		},
		{
			name:    "valid directory with redundant separators",
			subDir:  "examples//nginx",
			wantErr: false,
		},
		{
			name:    "valid directory with dots in name",
			subDir:  "examples/nginx.conf.d",
			wantErr: false,
		},
		{
			name:    "path traversal - parent directory",
			subDir:  "..",
			wantErr: true,
		},
		{
			name:    "path traversal - multiple parent directories",
			subDir:  "../../../etc/passwd",
			wantErr: true,
		},
		{
			name:    "path traversal - deeply nested escape",
			subDir:  "../../../../../../../tmp/pwned",
			wantErr: true,
		},
		{
			name:    "path traversal - mixed with valid path",
			subDir:  "examples/../../etc/passwd",
			wantErr: true,
		},