Function test_path_traversal_dots

src-tauri/src/tools/executor.rs:653–676

()

    #[tokio::test]
    async fn test_path_traversal_dots() {
        let sandbox_path = with_sandbox("path_traversal_dots");

        // Create a real file inside sandbox
        tokio::fs::write(sandbox_path.join("safe.txt"), "hello")
            .await
            .expect("create safe.txt");

        let executor = ToolExecutor::new(sandbox_path.clone());

        // Attempt traversal via relative path — should be rejected
        let call = ToolCall {
            tool: ToolName::ReadFile,
            input: serde_json::json!({ "path": "../../../../etc/passwd" }),
        };
        let result = executor.execute(call).await;
        assert!(
            result.is_error,
            "Path traversal with .. should be rejected, got: {}",
            result.output
        );

        cleanup("path_traversal_dots");
    }

    #[tokio::test]
    async fn test_path_traversal_absolute_escape() {