Function test_path_traversal_absolute_escape

src-tauri/src/tools/executor.rs:679–701

()

    #[tokio::test]
    async fn test_path_traversal_absolute_escape() {
        let sandbox_path = with_sandbox("path_traversal_abs");

        tokio::fs::write(sandbox_path.join("safe.txt"), "hello")
            .await
            .expect("create safe.txt");

        let executor = ToolExecutor::new(sandbox_path);

        // Absolute path pointing outside sandbox
        let call = ToolCall {
            tool: ToolName::ReadFile,
            input: serde_json::json!({ "path": "/etc/passwd" }),
        };
        let result = executor.execute(call).await;
        assert!(
            result.is_error,
            "Absolute path outside sandbox should be rejected, got: {}",
            result.output
        );

        cleanup("path_traversal_abs");
    }

    #[tokio::test]
    #[cfg(unix)]