29 lines
706 B
Go
29 lines
706 B
Go
package ssh
|
|
|
|
import "testing"
|
|
|
|
func TestValidateSFTPRemotePathRejectsTraversal(t *testing.T) {
|
|
if got, err := validateSFTPRemotePath("snapgo/2026/image.png"); err != nil || got != "snapgo/2026/image.png" {
|
|
t.Fatalf("valid path: got %q err=%v", got, err)
|
|
}
|
|
|
|
for _, value := range []string{
|
|
"",
|
|
"/absolute/image.png",
|
|
"~/image.png",
|
|
"../image.png",
|
|
"snapgo/../../image.png",
|
|
"snapgo\\image.png",
|
|
} {
|
|
if _, err := validateSFTPRemotePath(value); err == nil {
|
|
t.Errorf("expected %q to be rejected", value)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestSFTPProbePathRejectsTraversalPrefix(t *testing.T) {
|
|
if _, err := sftpProbePath("../../outside"); err == nil {
|
|
t.Fatal("expected traversal prefix to fail")
|
|
}
|
|
}
|