mirror of
https://github.com/kubernetes-sigs/kustomize.git
synced 2026-05-17 18:25:26 +00:00
68 lines
1.5 KiB
Go
68 lines
1.5 KiB
Go
// Copyright 2019 The Kubernetes Authors.
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package loader
|
|
|
|
import (
|
|
"path/filepath"
|
|
"strings"
|
|
"testing"
|
|
|
|
"sigs.k8s.io/kustomize/api/filesys"
|
|
)
|
|
|
|
func TestRestrictionNone(t *testing.T) {
|
|
fSys := filesys.MakeFsInMemory()
|
|
root := filesys.ConfirmedDir("irrelevant")
|
|
path := "whatever"
|
|
p, err := RestrictionNone(fSys, root, path)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if p != path {
|
|
t.Fatalf("expected '%s', got '%s'", path, p)
|
|
}
|
|
}
|
|
|
|
func TestRestrictionRootOnly(t *testing.T) {
|
|
fSys := filesys.MakeFsInMemory()
|
|
root := filesys.ConfirmedDir(
|
|
filesys.Separator + filepath.Join("tmp", "foo"))
|
|
path := filepath.Join(string(root), "whatever", "beans")
|
|
|
|
fSys.Create(path)
|
|
p, err := RestrictionRootOnly(fSys, root, path)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if p != path {
|
|
t.Fatalf("expected '%s', got '%s'", path, p)
|
|
}
|
|
|
|
// Legal.
|
|
path = filepath.Join(
|
|
string(root), "whatever", "..", "..", "foo", "whatever", "beans")
|
|
p, err = RestrictionRootOnly(fSys, root, path)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
path = filepath.Join(
|
|
string(root), "whatever", "beans")
|
|
if p != path {
|
|
t.Fatalf("expected '%s', got '%s'", path, p)
|
|
}
|
|
|
|
// Illegal; file exists but is out of bounds.
|
|
path = filepath.Join(filesys.Separator+"tmp", "illegal")
|
|
fSys.Create(path)
|
|
_, err = RestrictionRootOnly(fSys, root, path)
|
|
if err == nil {
|
|
t.Fatal("should have an error")
|
|
}
|
|
if !strings.Contains(
|
|
err.Error(),
|
|
"file '/tmp/illegal' is not in or below '/tmp/foo'") {
|
|
t.Fatalf("unexpected err: %s", err)
|
|
}
|
|
}
|