mengzhx/deepseek-harness
1
0
Fork 0
mirror of https://github.com/deepseek-ai/deepseek-harness.git synced 2026-08-29 04:26:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

test(sandbox): satisfy path boundary lint

Browse Source
This commit is contained in:
Tianyi Cui
2026-08-10 18:57:29 +08:00
parent ee21d593b6
commit 8143f01678
1 changed files with 18 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/sandbox/sandbox-windows-acl/tests/path-boundary.spec.ts
+18 -6
View File
@@ -25,8 +25,12 @@ describe('Windows ACL temp path boundary', () => {
const nested = join(workspace, 'temp')
mkdirSync(nested)
expect(() => assertTempRootOutsideWorkspace(workspace, workspace)).toThrow(/temp root must be outside the workspace/u)
expect(() => assertTempRootOutsideWorkspace(workspace, nested)).toThrow(/temp root must be outside the workspace/u)
expect(() => {
assertTempRootOutsideWorkspace(workspace, workspace)
}).toThrow(/temp root must be outside the workspace/u)
expect(() => {
assertTempRootOutsideWorkspace(workspace, nested)
}).toThrow(/temp root must be outside the workspace/u)
})
it('accepts a temp parent above the workspace because a fresh child is a sibling', () => {
@@ -34,7 +38,9 @@ describe('Windows ACL temp path boundary', () => {
const workspace = join(tempRoot, 'workspace')
mkdirSync(workspace)
expect(() => assertTempRootOutsideWorkspace(workspace, tempRoot)).not.toThrow()
expect(() => {
assertTempRootOutsideWorkspace(workspace, tempRoot)
}).not.toThrow()
})
it('requires an actual private temp directory to be disjoint in either direction', () => {
@@ -46,8 +52,14 @@ describe('Windows ACL temp path boundary', () => {
mkdirSync(nestedTemp)
mkdirSync(siblingTemp)
expect(() => assertPrivateTempDisjoint([workspace], nestedTemp)).toThrow(/must be disjoint/u)
expect(() => assertPrivateTempDisjoint([nestedTemp], workspace)).toThrow(/must be disjoint/u)
expect(() => assertPrivateTempDisjoint([workspace], siblingTemp)).not.toThrow()
expect(() => {
assertPrivateTempDisjoint([workspace], nestedTemp)
}).toThrow(/must be disjoint/u)
expect(() => {
assertPrivateTempDisjoint([nestedTemp], workspace)
}).toThrow(/must be disjoint/u)
expect(() => {
assertPrivateTempDisjoint([workspace], siblingTemp)
}).not.toThrow()
})
})