a7c0aa94d9
Merged via /review-pr -> /prepare-pr -> /merge-pr. Prepared head SHA: 7a088e6801d4ec45858ba47d20a8c8615ba35389 Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Reviewed-by: @mbelinky
33 lines
1.1 KiB
TypeScript
33 lines
1.1 KiB
TypeScript
import os from "node:os";
|
|
import path from "node:path";
|
|
import { describe, expect, it } from "vitest";
|
|
import { buildRandomTempFilePath } from "./temp-path.js";
|
|
|
|
describe("buildRandomTempFilePath", () => {
|
|
it("builds deterministic paths when now/uuid are provided", () => {
|
|
const result = buildRandomTempFilePath({
|
|
prefix: "line-media",
|
|
extension: ".jpg",
|
|
tmpDir: "/tmp",
|
|
now: 123,
|
|
uuid: "abc",
|
|
});
|
|
expect(result).toBe(path.join("/tmp", "line-media-123-abc.jpg"));
|
|
});
|
|
|
|
it("sanitizes prefix and extension to avoid path traversal segments", () => {
|
|
const result = buildRandomTempFilePath({
|
|
prefix: "../../line/../media",
|
|
extension: "/../.jpg",
|
|
now: 123,
|
|
uuid: "abc",
|
|
});
|
|
const tmpRoot = path.resolve(os.tmpdir());
|
|
const resolved = path.resolve(result);
|
|
const rel = path.relative(tmpRoot, resolved);
|
|
expect(rel === ".." || rel.startsWith(`..${path.sep}`)).toBe(false);
|
|
expect(path.basename(result)).toBe("line-media-123-abc.jpg");
|
|
expect(result).not.toContain("..");
|
|
});
|
|
});
|