package platform import ( "os" "path/filepath" "testing" "git.casaderoll.de/michael/urbm/internal/model" ) func TestValidateRestoreTarget(t *testing.T) { root := "/mnt/user/urbm-restores" target := filepath.Join(root, "task") if got, err := ValidateRestoreTarget(target, root, false, false); err != nil || got != target { t.Fatalf("staging target rejected: %q %v", got, err) } if got, err := ValidateRestoreTarget("/mnt/user/Transfer", root, false, false); err != nil || got != "/mnt/user/Transfer" { t.Fatalf("user share restore target rejected: %q %v", got, err) } if _, err := ValidateRestoreTarget("/home/root/restore", root, false, false); err == nil { t.Fatal("staging target outside allowed restore roots accepted") } if got, err := ValidateRestoreTarget("/mnt/user/data", root, true, true); err != nil || got != "/" { t.Fatalf("confirmed in-place target = %q, %v", got, err) } if _, err := ValidateRestoreTarget("/mnt/user/data", root, true, false); err == nil { t.Fatal("unconfirmed in-place restore accepted") } } func TestValidateRsyncPathsRejectsSymlinkOverlap(t *testing.T) { root := t.TempDir() source := filepath.Join(root, "source") if err := os.Mkdir(source, 0755); err != nil { t.Fatal(err) } target := filepath.Join(root, "target-link") if err := os.Symlink(source, target); err != nil { t.Fatal(err) } job := model.Job{Sources: []model.Source{{Path: source}}, Rsync: model.RsyncOptions{Target: target}} if err := ValidateRsyncPaths(job); err == nil { t.Fatal("symlinked rsync target overlapping the source was accepted") } } func TestValidateRestoreTargetRejectsSymlink(t *testing.T) { root := t.TempDir() real := filepath.Join(root, "real") link := filepath.Join(root, "link") if err := os.Mkdir(real, 0755); err != nil { t.Fatal(err) } if err := os.Symlink(real, link); err != nil { t.Fatal(err) } if err := rejectSymlinks(root, filepath.Join(link, "task")); err == nil { t.Fatal("symlink traversal accepted") } } func TestRejectSymlinksChecksRootItself(t *testing.T) { base := t.TempDir() real := filepath.Join(base, "real") link := filepath.Join(base, "root-link") if err := os.Mkdir(real, 0755); err != nil { t.Fatal(err) } if err := os.Symlink(real, link); err != nil { t.Fatal(err) } if err := rejectSymlinks(link, filepath.Join(link, "task")); err == nil { t.Fatal("symlinked restore root accepted") } }