Function test_is_outside_sandbox

src-tauri/src/tools/executor.rs:745–766

()

    #[tokio::test]
    async fn test_is_outside_sandbox() {
        let sandbox_path = with_sandbox("outside_sandbox");

        tokio::fs::write(sandbox_path.join("file.txt"), "data")
            .await
            .expect("create file");

        let executor = ToolExecutor::new(sandbox_path);

        // Path inside sandbox
        assert!(!executor.is_outside_sandbox("file.txt"));
        assert!(!executor.is_outside_sandbox("subdir/file.txt"));

        // Path attempting escape via ..
        assert!(executor.is_outside_sandbox("../outside.txt"));
        assert!(executor.is_outside_sandbox("../../etc/passwd"));

        // Absolute path outside sandbox
        assert!(executor.is_outside_sandbox("/etc/shadow"));

        cleanup("outside_sandbox");
    }

    // ── Read / Write File ─────────────────────────────────────────────────────