O96u
469d3be735
Consolidate local images under data/images/, add docker migrate CLI, startup index sync with orphan cleanup, and remove upload folder UI/API.
19 lines
786 B
TypeScript
19 lines
786 B
TypeScript
import { describe, expect, it } from 'vitest'
|
|
import { validateImageKey } from './image-key'
|
|
|
|
describe('image index key validation', () => {
|
|
it('accepts standard image keys used in index', () => {
|
|
expect(validateImageKey('images/2026/03/abc.webp')).toBe(true)
|
|
expect(validateImageKey('images/file/111.webp')).toBe(true)
|
|
expect(validateImageKey('images/2026/08/28/123.webp')).toBe(true)
|
|
expect(validateImageKey('images/abc.webp')).toBe(true)
|
|
})
|
|
|
|
it('rejects legacy top-level keys and path traversal', () => {
|
|
expect(validateImageKey('../secret')).toBe(false)
|
|
expect(validateImageKey('images/../../etc/passwd')).toBe(false)
|
|
expect(validateImageKey('twikoo/2026/03/abc.webp')).toBe(false)
|
|
expect(validateImageKey('blog/abc.webp')).toBe(false)
|
|
})
|
|
})
|