esengine/DeepSeek-Reasonix
1
0 Fork 0
mirror of https://github.com/esengine/DeepSeek-Reasonix.git synced 2026-11-07 10:45:59 -10:00
Code Issues Packages Projects Releases 1 Wiki Activity

test(serve): use a Windows-legal directory name in the tree JSON escaping test

Browse Source 
Windows refuses < and > in a file name, so TestTreeWriteKeepsJSONContentTypeAndEscaping
failed at mkdir on the Windows leg. & is the other character the JSON encoder
escapes, so the same assertion holds there.
This commit is contained in:
yhh committed 2026-10-11 10:59:08 -07:00
1 parent 0ac9826a9e
commit bdc108ec1c
1 file changed
+13 -6
Download Patch File Download Diff File Expand all files Collapse all files
internal/frontend/serve/hub_sync_test.go
+13 -6
View File
@@ -14,6 +14,7 @@ import (
"reasonix/internal/session/control"
"reasonix/internal/state/sessionstore"
"reasonix/internal/state/store"
"runtime"
"strings"
"testing"
"time"
@@ -232,7 +233,13 @@ func TestTreeInvalidationFollowsAutomaticArchiveOnlyWhenRowsChange(t *testing.T)
func TestTreeWriteKeepsJSONContentTypeAndEscaping(t *testing.T) {
t.Setenv("REASONIX_HOME", testenv.TempDir(t))
root := filepath.Join(testenv.TempDir(t), `<svg onload=alert(1)>`)
// Windows refuses < and > in a file name; & is the other character the JSON
// encoder escapes, so the same check still holds there.
name, raw := `<svg onload=alert(1)>`, "<svg"
if runtime.GOOS == "windows" {
name, raw = `&svg onload=alert(1)`, "&svg"
}
root := filepath.Join(testenv.TempDir(t), name)
if err := os.Mkdir(root, 0700); err != nil {
t.Fatal(err)
}
@@ -245,16 +252,16 @@ func TestTreeWriteKeepsJSONContentTypeAndEscaping(t *testing.T) {
t.Fatal(err)
}
defer response.Body.Close()
raw, err := io.ReadAll(response.Body)
body, err := io.ReadAll(response.Body)
if err != nil {
t.Fatal(err)
}
if response.StatusCode != http.StatusOK || response.Header.Get("Content-Type") != "application/json" || bytes.Contains(raw, []byte("<svg")) {
t.Fatalf("unsafe JSON response: %d %s %s", response.StatusCode, response.Header.Get("Content-Type"), raw)
if response.StatusCode != http.StatusOK || response.Header.Get("Content-Type") != "application/json" || bytes.Contains(body, []byte(raw)) {
t.Fatalf("unsafe JSON response: %d %s %s", response.StatusCode, response.Header.Get("Content-Type"), body)
}
var workspace treeWorkspace
if err := json.Unmarshal(raw, &workspace); err != nil || workspace.Root != root {
t.Fatalf("JSON lost input: %s, %v", raw, err)
if err := json.Unmarshal(body, &workspace); err != nil || workspace.Root != root {
t.Fatalf("JSON lost input: %s, %v", body, err)
}
if h.changes.Watermark() == 0 {
t.Fatal("implicit 200 write did not invalidate")