Function Test_extractZip

internal/zip/zip_test.go:15–108

(t *testing.T)

)

func Test_extractZip(t *testing.T) {
	tests := []struct {
		name        string
		directories []string
		entries     []string
		setup       func(t *testing.T, extractPath, outside string)
		wantExtract []string
		wantDirs    []string
		wantErr     string
	}{
		{
			name:        "extracts nested file",
			entries:     []string{"src/main.go"},
			wantExtract: []string{"src/main.go"},
		},
		{
			name:    "skips lexical escape",
			entries: []string{"../outside.txt"},
		},
		{
			name: "skips escapes among safe entries",
			entries: []string{
				"../outside-before.txt",
				"safe-one.txt",
				"../../outside-between.txt",
				"nested/safe-two.txt",
			},
			wantExtract: []string{"safe-one.txt", "nested/safe-two.txt"},
		},
		{
			name:        "extracts explicit directory",
			directories: []string{"nested/"},
			wantDirs:    []string{"nested"},
		},
		{
			name:        "explicit directory rejects planted link",
			directories: []string{"nested/"},
			setup: func(t *testing.T, extractPath, outside string) {
				t.Helper()
				require.NoError(t, os.Symlink(outside, filepath.Join(extractPath, "nested")))
			},
			wantErr: "symbolic link",
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			var archive bytes.Buffer
			writer := zip.NewWriter(&archive)
			for _, name := range tt.directories {
				header := &zip.FileHeader{Name: name}
				header.SetMode(os.ModeDir | 0o755)
				_, err := writer.CreateHeader(header)
				require.NoError(t, err)
			}
			for _, name := range tt.entries {
				file, err := writer.Create(name)
				require.NoError(t, err)