release: v1.3.0 — 整站备份恢复、跨后端同步与任务中心

server/utils/backup/paths.test.ts

@@ -0,0 +1,22 @@
+import { describe, expect, it } from 'vitest'
+import { BACKUP_FORMAT_VERSION } from './manifest'
+import { BACKUP_ARCHIVE_EXT, isSafeBackupFilename } from './paths'
+
+describe('isSafeBackupFilename', () => {
+  it('accepts valid backup archive names', () => {
+    expect(isSafeBackupFilename(`pichost-abc123${BACKUP_ARCHIVE_EXT}`)).toBe(true)
+  })
+
+  it('rejects path traversal and wrong extension', () => {
+    expect(isSafeBackupFilename('')).toBe(false)
+    expect(isSafeBackupFilename('../secret.phost.tar.gz')).toBe(false)
+    expect(isSafeBackupFilename('backup.tar.gz')).toBe(false)
+    expect(isSafeBackupFilename('nested/pkg.phost.tar.gz')).toBe(false)
+  })
+})
+
+describe('BACKUP_FORMAT_VERSION', () => {
+  it('is v1', () => {
+    expect(BACKUP_FORMAT_VERSION).toBe(1)
+  })
+})