import { describe, expect, it } from 'vitest'
import { validateImageKey } from './image-key'

describe('image index key validation', () => {
  it('accepts standard image keys used in index', () => {
    expect(validateImageKey('images/2026/03/abc.webp')).toBe(true)
    expect(validateImageKey('twikoo/2026/03/abc.webp')).toBe(true)
    expect(validateImageKey('images/abc.webp')).toBe(true)
  })

  it('rejects path traversal keys', () => {
    expect(validateImageKey('../secret')).toBe(false)
    expect(validateImageKey('images/../../etc/passwd')).toBe(false)
  })
})