70a6110590
TypeScript/Deno runtime bridge — Go gRPC server + Deno sidecar. The seed project that inspired the entire Core framework. - Module: forge.lthn.ai/core/ts - Package: ts (renamed from coredeno) - gRPC bridge: CoreService (Go→Deno) + DenoService (Deno→Go) - Deno runtime: worker isolation, module loading, permissions - Proto descriptor retains original path (regenerate with protoc later) Co-Authored-By: Virgil <virgil@lethean.io>
40 lines
1.1 KiB
Go
40 lines
1.1 KiB
Go
package ts
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestCheckPath_Good_Allowed(t *testing.T) {
|
|
allowed := []string{"./data/", "./config/"}
|
|
assert.True(t, CheckPath("./data/file.txt", allowed))
|
|
assert.True(t, CheckPath("./config/app.json", allowed))
|
|
}
|
|
|
|
func TestCheckPath_Bad_Denied(t *testing.T) {
|
|
allowed := []string{"./data/"}
|
|
assert.False(t, CheckPath("./secrets/key.pem", allowed))
|
|
assert.False(t, CheckPath("../escape/file", allowed))
|
|
}
|
|
|
|
func TestCheckPath_Good_EmptyDenyAll(t *testing.T) {
|
|
assert.False(t, CheckPath("./anything", nil))
|
|
assert.False(t, CheckPath("./anything", []string{}))
|
|
}
|
|
|
|
func TestCheckNet_Good_Allowed(t *testing.T) {
|
|
allowed := []string{"pool.lthn.io:3333", "api.lthn.io:443"}
|
|
assert.True(t, CheckNet("pool.lthn.io:3333", allowed))
|
|
}
|
|
|
|
func TestCheckNet_Bad_Denied(t *testing.T) {
|
|
allowed := []string{"pool.lthn.io:3333"}
|
|
assert.False(t, CheckNet("evil.com:80", allowed))
|
|
}
|
|
|
|
func TestCheckRun_Good(t *testing.T) {
|
|
allowed := []string{"xmrig", "sha256sum"}
|
|
assert.True(t, CheckRun("xmrig", allowed))
|
|
assert.False(t, CheckRun("rm", allowed))
|
|
}
|