43 lines
1.3 KiB
Go
43 lines
1.3 KiB
Go
package platform
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
)
|
|
|
|
func TestValidateRestoreTarget(t *testing.T) {
|
|
root := t.TempDir()
|
|
target := filepath.Join(root, "task")
|
|
if got, err := ValidateRestoreTarget(target, root, false, false); err != nil || got != target {
|
|
t.Fatalf("staging target rejected: %q %v", got, err)
|
|
}
|
|
if got, err := ValidateRestoreTarget("/mnt/user/Transfer", root, false, false); err != nil || got != "/mnt/user/Transfer" {
|
|
t.Fatalf("user share restore target rejected: %q %v", got, err)
|
|
}
|
|
if _, err := ValidateRestoreTarget("/home/root/restore", root, false, false); err == nil {
|
|
t.Fatal("staging target outside allowed restore roots accepted")
|
|
}
|
|
if _, err := ValidateRestoreTarget("/etc", root, true, true); err == nil {
|
|
t.Fatal("protected target accepted")
|
|
}
|
|
if _, err := ValidateRestoreTarget("/mnt/user/data", root, true, false); err == nil {
|
|
t.Fatal("unconfirmed in-place restore accepted")
|
|
}
|
|
}
|
|
|
|
func TestValidateRestoreTargetRejectsSymlink(t *testing.T) {
|
|
root := t.TempDir()
|
|
real := filepath.Join(root, "real")
|
|
link := filepath.Join(root, "link")
|
|
if err := os.Mkdir(real, 0755); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := os.Symlink(real, link); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if _, err := ValidateRestoreTarget(filepath.Join(link, "task"), root, false, false); err == nil {
|
|
t.Fatal("symlink traversal accepted")
|
|
}
|
|
}
|