José Almeida
121 lines
2.6 KiB
Go
121 lines
2.6 KiB
Go
package securityutil
|
|
|
|
import (
|
|
"testing"
|
|
)
|
|
|
|
func TestShellEscape(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
input string
|
|
expected string
|
|
}{
|
|
{
|
|
name: "empty string",
|
|
input: "",
|
|
expected: "''",
|
|
},
|
|
{
|
|
name: "simple path",
|
|
input: "/path/to/file.txt",
|
|
expected: "/path/to/file.txt",
|
|
},
|
|
{
|
|
name: "path with spaces",
|
|
input: "/path/to/my file.txt",
|
|
expected: "'/path/to/my file.txt'",
|
|
},
|
|
{
|
|
name: "path with single quote",
|
|
input: "/path/to/file's.txt",
|
|
expected: "'/path/to/file'\\''s.txt'",
|
|
},
|
|
{
|
|
name: "path with special chars",
|
|
input: "/path/to/file$name.txt",
|
|
expected: "'/path/to/file$name.txt'",
|
|
},
|
|
}
|
|
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
result := ShellEscape(tt.input)
|
|
if result != tt.expected {
|
|
t.Errorf("ShellEscape(%q) = %q, want %q", tt.input, result, tt.expected)
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestSplitShellCommand(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
input string
|
|
want []string
|
|
wantErr bool
|
|
}{
|
|
{
|
|
name: "simple command",
|
|
input: "echo hello",
|
|
want: []string{"echo", "hello"},
|
|
},
|
|
{
|
|
name: "command with single quotes",
|
|
input: "code '/path/to/my file.txt'",
|
|
want: []string{"code", "/path/to/my file.txt"},
|
|
},
|
|
{
|
|
name: "command with double quotes",
|
|
input: `code "/path/to/my file.txt"`,
|
|
want: []string{"code", "/path/to/my file.txt"},
|
|
},
|
|
{
|
|
name: "command with escaped single quote",
|
|
input: "code '/path/to/file'\\''s.txt'",
|
|
want: []string{"code", "/path/to/file's.txt"},
|
|
},
|
|
{
|
|
name: "complex command",
|
|
input: "code '/path with spaces/file.txt':10:5",
|
|
want: []string{"code", "/path with spaces/file.txt:10:5"},
|
|
},
|
|
{
|
|
name: "unclosed single quote",
|
|
input: "code '/path/to/file.txt",
|
|
wantErr: true,
|
|
},
|
|
{
|
|
name: "unclosed double quote",
|
|
input: `code "/path/to/file.txt`,
|
|
wantErr: true,
|
|
},
|
|
{
|
|
name: "escaped backslash",
|
|
input: `code "path\\file.txt"`,
|
|
want: []string{"code", `path\file.txt`},
|
|
},
|
|
}
|
|
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
got, err := SplitShellCommand(tt.input)
|
|
if (err != nil) != tt.wantErr {
|
|
t.Errorf("SplitShellCommand() error = %v, wantErr %v", err, tt.wantErr)
|
|
return
|
|
}
|
|
if tt.wantErr {
|
|
return
|
|
}
|
|
if len(got) != len(tt.want) {
|
|
t.Errorf("SplitShellCommand() = %v, want %v", got, tt.want)
|
|
return
|
|
}
|
|
for i := range got {
|
|
if got[i] != tt.want[i] {
|
|
t.Errorf("SplitShellCommand() arg[%d] = %q, want %q", i, got[i], tt.want[i])
|
|
}
|
|
}
|
|
})
|
|
}
|
|
}
|