mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-09-28 05:46:36 +08:00
ryan
aa4faddade
Result: {"status":"keep","total_issues":8,"golint_canonicalheader":0,"golint_errname":0,"golint_errorlint":1,"golint_exhaustive":0,"golint_forcetypeassert":0,"golint_gosec":0,"golint_intrange":0,"golint_modernize":3,"golint_nilnil":3,"golint_perfsprint":0,"golint_prealloc":0,"golint_recvcheck":1,"golint_usestdlibvars":0,"golint_wastedassign":0,"golint_total":8,"golint_test_testifylint":0,"golint_test_thelper":0,"golint_test_usetesting":0,"golint_test_total":0,"golint_vetx_total":0,"eslint_problems":0,"eslint_errors":0,"eslint_warnings":0,"tsc_errors":0,"vitest_failed":0,"vitest_total":116,"measure_s":81}
79 lines
2.6 KiB
Go
79 lines
2.6 KiB
Go
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package nginx
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
)
|
|
|
|
func TestEnsureWorkerReadableTreeFixesRestrictedPagesFiles(t *testing.T) {
|
|
tempDir := t.TempDir()
|
|
pagesDir := filepath.Join(tempDir, "data", "var", "lib", "openflare", "pages")
|
|
releaseDir := filepath.Join(pagesDir, "deployments", "1", "releases", "abc123")
|
|
if err := os.MkdirAll(releaseDir, 0o700); err != nil {
|
|
t.Fatalf("MkdirAll failed: %v", err)
|
|
}
|
|
indexPath := filepath.Join(releaseDir, "index.html")
|
|
if err := os.WriteFile(indexPath, []byte("<html></html>"), 0o600); err != nil {
|
|
t.Fatalf("WriteFile failed: %v", err)
|
|
}
|
|
|
|
if err := EnsureWorldTraversablePath(pagesDir); err != nil {
|
|
t.Fatalf("EnsureWorldTraversablePath failed: %v", err)
|
|
}
|
|
if err := EnsureWorkerReadableTree(pagesDir); err != nil {
|
|
t.Fatalf("EnsureWorkerReadableTree failed: %v", err)
|
|
}
|
|
|
|
info, err := os.Stat(indexPath)
|
|
if err != nil {
|
|
t.Fatalf("Stat failed: %v", err)
|
|
}
|
|
if info.Mode().Perm() != nginxConfigFilePerm {
|
|
t.Fatalf("expected index.html mode %o, got %o", nginxConfigFilePerm, info.Mode().Perm())
|
|
}
|
|
etcInfo, err := os.Stat(filepath.Join(tempDir, "data", "var"))
|
|
if err != nil {
|
|
t.Fatalf("Stat var failed: %v", err)
|
|
}
|
|
if etcInfo.Mode().Perm()&0o005 == 0 {
|
|
t.Fatalf("expected var directory to be world-traversable, got %o", etcInfo.Mode().Perm())
|
|
}
|
|
}
|
|
|
|
func TestManagerEnsureWorkerReadAccessIncludesPagesDir(t *testing.T) {
|
|
tempDir := t.TempDir()
|
|
dataDir := filepath.Join(tempDir, "data")
|
|
pagesRoot := filepath.Join(dataDir, "var", "lib", "openflare", "pages")
|
|
releaseDir := filepath.Join(pagesRoot, "deployments", "1", "releases", "abc123")
|
|
if err := os.MkdirAll(releaseDir, 0o700); err != nil {
|
|
t.Fatalf("MkdirAll failed: %v", err)
|
|
}
|
|
if err := os.WriteFile(filepath.Join(releaseDir, "index.html"), []byte("ok"), 0o600); err != nil {
|
|
t.Fatalf("WriteFile failed: %v", err)
|
|
}
|
|
|
|
manager := &Manager{PagesDir: pagesRoot}
|
|
if err := manager.EnsureWorkerReadAccess(); err != nil {
|
|
t.Fatalf("EnsureWorkerReadAccess failed: %v", err)
|
|
}
|
|
|
|
info, err := os.Stat(filepath.Join(tempDir, "data"))
|
|
if err != nil {
|
|
t.Fatalf("Stat data failed: %v", err)
|
|
}
|
|
if info.Mode().Perm()&0o005 == 0 {
|
|
t.Fatalf("expected data directory to be world-traversable, got %o", info.Mode().Perm())
|
|
}
|
|
indexInfo, err := os.Stat(filepath.Join(releaseDir, "index.html"))
|
|
if err != nil {
|
|
t.Fatalf("Stat index failed: %v", err)
|
|
}
|
|
if indexInfo.Mode().Perm() != nginxConfigFilePerm {
|
|
t.Fatalf("expected index.html mode %o, got %o", nginxConfigFilePerm, indexInfo.Mode().Perm())
|
|
}
|
|
}
|