Function TestValidatePathInBase

pkg/remote/oci_test.go:27–118

(t *testing.T)

)

func TestValidatePathInBase(t *testing.T) {
	base := "/tmp/cache/compose"

	tests := []struct {
		name       string
		unsafePath string
		wantErr    bool
	}{
		{
			name:       "valid simple filename",
			unsafePath: "compose.yaml",
			wantErr:    false,
		},
		{
			name:       "valid hashed filename",
			unsafePath: "f8f9ede3d201ec37d5a5e3a77bbadab79af26035e53135e19571f50d541d390c.yaml",
			wantErr:    false,
		},
		{
			name:       "valid env file",
			unsafePath: ".env",
			wantErr:    false,
		},
		{
			name:       "valid env file with suffix",
			unsafePath: ".env.prod",
			wantErr:    false,
		},
		{
			name:       "unix path traversal",
			unsafePath: "../../../etc/passwd",
			wantErr:    true,
		},
		{
			name:       "windows path traversal",
			unsafePath: "..\\..\\..\\windows\\system32\\config\\sam",
			wantErr:    true,
		},
		{
			name:       "subdirectory unix",
			unsafePath: "config/base.yaml",
			wantErr:    true,
		},
		{
			name:       "subdirectory windows",
			unsafePath: "config\\base.yaml",
			wantErr:    true,
		},
		{
			name:       "absolute unix path",
			unsafePath: "/etc/passwd",
			wantErr:    true,
		},
		{
			name:       "absolute windows path",
			unsafePath: "C:\\windows\\system32\\config\\sam",
			wantErr:    true,
		},