Function TestMutableSafeURLString

internal/safeurl/safeurl_test.go:99–254

(t *testing.T)

}

func TestMutableSafeURLString(t *testing.T) {
	tests := []struct {
		name string
		url  func(t *testing.T) (*safeurl.MutableSafeURL, error)
		want string
	}{
		{
			name: "zero value renders empty",
			url: func(t *testing.T) (*safeurl.MutableSafeURL, error) {
				return &safeurl.MutableSafeURL{}, nil
			},
			want: "",
		},
		{
			name: "path only",
			url: func(t *testing.T) (*safeurl.MutableSafeURL, error) {
				return safeurl.JoinPath("foo", "bar", "baz")
			},
			want: "foo/bar/baz",
		},
		{
			name: "single path component",
			url: func(t *testing.T) (*safeurl.MutableSafeURL, error) {
				return safeurl.JoinPath("foo")
			},
			want: "foo",
		},
		{
			name: "empty components produce empty segments",
			url: func(t *testing.T) (*safeurl.MutableSafeURL, error) {
				return safeurl.JoinPath("", "bar", "")
			},
			want: "/bar/",
		},
		{
			name: "escapes path components",
			url: func(t *testing.T) (*safeurl.MutableSafeURL, error) {
				return safeurl.JoinPath("foo", "bar baz", "a/b")
			},
			want: "foo/bar%20baz/a%2Fb",
		},
		{
			name: "pre-encoded dot-dot cannot bypass the traversal check",
			url: func(t *testing.T) (*safeurl.MutableSafeURL, error) {
				return safeurl.JoinPath("foo", "bar", "%2e%2e", "baz")
			},
			want: "foo/bar/%252e%252e/baz",
		},
		{
			name: "single dot component is preserved verbatim",
			url: func(t *testing.T) (*safeurl.MutableSafeURL, error) {
				return safeurl.JoinPath("foo", "bar", ".", "baz")
			},
			want: "foo/bar/./baz",
		},
		{
			name: "leading single dot components are preserved verbatim",
			url: func(t *testing.T) (*safeurl.MutableSafeURL, error) {