Function TestFSRootEnforcement

fs_fs_test.go:1019–1111

(t *testing.T)

}

func TestFSRootEnforcement(t *testing.T) {
	t.Parallel()

	memFS := fstest.MapFS{
		"public/index.html":  {Data: []byte("<h1>Public</h1>")},
		"secret/admin.json":  {Data: []byte(`{"admin": true, "key": "s3cret"}`)},
		"public/nested/info": {Data: []byte("nested")},
	}

	// Skip dirfs subtests on Windows: the FS handler pools open file handles
	// (via bigFileReader) which prevents t.TempDir cleanup.
	// The mapfs subtests exercise the same root enforcement logic.
	var tmpDir string
	if runtime.GOOS != "windows" {
		tmpDir = t.TempDir()
		if err := os.MkdirAll(filepath.Join(tmpDir, "public"), 0o755); err != nil {
			t.Fatalf("cannot create public dir: %v", err)
		}
		if err := os.MkdirAll(filepath.Join(tmpDir, "secret"), 0o755); err != nil {
			t.Fatalf("cannot create secret dir: %v", err)
		}
		if err := os.WriteFile(filepath.Join(tmpDir, "public", "index.html"), []byte("<h1>Public</h1>"), 0o644); err != nil {
			t.Fatalf("cannot create public index: %v", err)
		}
		if err := os.WriteFile(filepath.Join(tmpDir, "secret", "admin.json"), []byte(`{"admin": true, "key": "s3cret"}`), 0o644); err != nil {
			t.Fatalf("cannot create secret admin file: %v", err)
		}
	}

	type testCase struct {
		name        string
		root        string
		filesystem  fs.FS
		pathRewrite PathRewriteFunc
	}

	cases := make([]testCase, 0, 9)
	for _, root := range []string{"public", "public/", "./public", "/public"} {
		cases = append(cases, testCase{
			name:       "mapfs/" + root,
			root:       root,
			filesystem: memFS,
		})
		if tmpDir != "" {
			cases = append(cases, testCase{
				name:       "dirfs/" + root,
				root:       root,
				filesystem: os.DirFS(tmpDir),
			})
		}
	}

	cases = append(cases, testCase{
		name:       "mapfs/pathrewrite-no-leading-slash",
		root:       "./public/",
		filesystem: memFS,
		pathRewrite: func(ctx *RequestCtx) []byte {
			return bytes.TrimPrefix(ctx.Path(), []byte("/"))