jamminrebel/pom-omp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: initialize POM 2 repo (docs guards green; release gates recorded NOT RUN pending install)

Browse Source
This commit is contained in:
Antigravity
2026-08-19 10:31:00 +02:00
commit 7ffd00b5c5
111 changed files with 12522 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
tests/paths.test.ts Normal file
View File

@@ -0,0 +1,24 @@
import assert from "node:assert/strict";
import test from "node:test";
import { mkdtemp, mkdir, rm, symlink, writeFile } from "node:fs/promises";
import { tmpdir } from "node:os";
import { join } from "node:path";
import { secureExistingPath, secureFuturePath } from "../src/paths";
test("canonical path guard rejects traversal and symlink escapes", async () => {
const parent = await mkdtemp(join(tmpdir(), "pom-paths-"));
const root = join(parent, "project");
const outside = join(parent, "outside.txt");
await mkdir(root);
await writeFile(join(root, "inside.txt"), "safe");
await writeFile(outside, "secret");
await symlink(outside, join(root, "escape.txt"));
try {
assert.equal(await secureExistingPath(root, "inside.txt"), join(root, "inside.txt"));
await assert.rejects(secureExistingPath(root, "../outside.txt"), /escapes project root/);
await assert.rejects(secureExistingPath(root, "escape.txt"), /Symbolic links/);
await assert.rejects(secureFuturePath(root, "../future.txt"), /escapes project root/);
} finally {
await rm(parent, { recursive: true, force: true });
}
});