O96u
bc4cba7e52
Publish Docker image / build-and-push (push) Canceled after 0s
ci / ci (22, ubuntu-latest) (push) Canceled after 0s
Multi-user image hosting with RBAC, upload preferences, and admin settings.
20 lines
820 B
TypeScript
20 lines
820 B
TypeScript
import { describe, expect, it } from 'vitest'
|
|
import { validateImageKey } from './image-key'
|
|
|
|
describe('validateImageKey', () => {
|
|
it('accepts valid keys', () => {
|
|
expect(validateImageKey('images/2026/08/abc123.webp')).toBe(true)
|
|
expect(validateImageKey('twikoo/2025/01/photo.jpg')).toBe(true)
|
|
})
|
|
|
|
it('rejects path traversal and malformed keys', () => {
|
|
expect(validateImageKey('')).toBe(false)
|
|
expect(validateImageKey('/images/2026/08/a.webp')).toBe(false)
|
|
expect(validateImageKey('images/2026/08/../secret.webp')).toBe(false)
|
|
expect(validateImageKey('images//2026/08/a.webp')).toBe(false)
|
|
expect(validateImageKey('api/2026/08/a.webp')).toBe(false)
|
|
expect(validateImageKey('images/26/8/a.webp')).toBe(false)
|
|
expect(validateImageKey('images/2026/08/a.txt')).toBe(false)
|
|
})
|
|
})
|