Function TestIsSafeScriptName

pkg/workflow/safe_scripts_test.go:394–420

TestIsSafeScriptName verifies path traversal detection in script names

(t *testing.T)

// TestIsSafeScriptName verifies path traversal detection in script names
func TestIsSafeScriptName(t *testing.T) {
	tests := []struct {
		name  string
		input string
		want  bool
	}{
		// Valid names
		{"plain name", "my_handler", true},
		{"name with numbers", "handler_v2", true},
		{"single word", "handler", true},
		{"dot in name", "handler.name", true},
		// Invalid — path separators and traversal sequences
		{"forward slash", "sub/handler", false},
		{"backslash", `sub\handler`, false},
		{"double dot", "handler..", false},
		{"leading dot-dot", "../evil", false},
		{"double dot only", "..", false},
		{"traversal chain", "../../etc/shadow", false},
		{"dot-dot at end", "handler/../../", false},
	}
	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			got := isSafeScriptName(tt.input)
			assert.Equal(t, tt.want, got, "isSafeScriptName(%q) should be %v", tt.input, tt.want)
		})
	}
}

// TestBuildCustomSafeOutputScriptsJSONPathTraversal verifies path traversal names are rejected
func TestBuildCustomSafeOutputScriptsJSONPathTraversal(t *testing.T) {