Function TestBackslashHandlingConsistency

enforcer_backslash_test.go:28–177

TestBackslashHandlingConsistency tests that backslashes in string literals within matcher expressions are handled consistently with CSV-parsed values. This addresses the issue where govaluate interprets escape sequences in string literals, but CSV parsing treats backslashes as literal characters.

(t *testing.T)

// This addresses the issue where govaluate interprets escape sequences in
// string literals, but CSV parsing treats backslashes as literal characters.
func TestBackslashHandlingConsistency(t *testing.T) {
	// Test case 1: Literal string in matcher should match CSV-parsed request
	t.Run("LiteralInMatcher", func(t *testing.T) {
		m := model.NewModel()
		m.AddDef("r", "r", "sub, obj, act")
		m.AddDef("p", "p", "sub, obj, act")
		m.AddDef("e", "e", "some(where (p.eft == allow))")
		// User writes '\1\2' in matcher - should be treated as literal backslashes
		m.AddDef("m", "m", "regexMatch('\\1\\2', p.obj)")

		e, err := NewEnforcer(m, fileadapter.NewAdapter("examples/basic_policy.csv"))
		if err != nil {
			t.Fatal(err)
		}

		// Add a policy with a regex pattern containing backslashes
		// CSV format: "\\[0-9]+\\" means literal string with 4 backslashes
		_, err = e.AddPolicy("filename", "\\\\[0-9]+\\\\", "read")
		if err != nil {
			t.Fatal(err)
		}

		// This should match because '\1\2' after escaping becomes \1\2,
		// and the pattern \\[0-9]+\\ matches strings like \1\ (which is a substring of \1\2)
		result, err := e.Enforce("filename", "dummy", "read")
		if err != nil {
			t.Fatal(err)
		}

		if !result {
			t.Errorf("Expected true, got false - literal '\\1\\2' should match after escape processing")
		}
	})

	// Test case 2: Request parameter should match policy with same backslash content
	t.Run("RequestParameterVsPolicy", func(t *testing.T) {
		m := model.NewModel()
		m.AddDef("r", "r", "sub, obj, act")
		m.AddDef("p", "p", "sub, obj, act")
		m.AddDef("e", "e", "some(where (p.eft == allow))")
		m.AddDef("m", "m", "regexMatch(r.obj, p.obj)")

		e, err := NewEnforcer(m, fileadapter.NewAdapter("examples/basic_policy.csv"))
		if err != nil {
			t.Fatal(err)
		}

		// Add policy with regex pattern
		_, err = e.AddPolicy("filename", "\\\\[0-9]+\\\\", "read")
		if err != nil {
			t.Fatal(err)
		}

		// Request with backslashes - simulating CSV input "\1\2" which becomes \1\2
		result, err := e.Enforce("filename", "\\1\\2", "read")
		if err != nil {
			t.Fatal(err)
		}