123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172
// Copyright 2018-2020 the oak authors. All rights reserved. MIT license.
import { assertEquals, assertThrows, test } from "./test_deps.ts";import { httpErrors } from "./httpError.ts";import { decodeComponent, resolvePath } from "./util.ts";
test({  name: "decodeComponent",  fn() {    // with decodeURIComponent, this would throw:    assertEquals(decodeComponent("%"), "%");  },});
test({  name: "resolvePath",  fn() {    assertEquals(resolvePath("./foo/bar"), `${Deno.cwd()}/foo/bar`);  },});
test({  name: "resolvePath outside of root",  fn() {    assertThrows(() => {      resolvePath("../foo/bar");    }, httpErrors.Forbidden);  },});
test({  name: "resolvePath outside of root devious",  fn() {    assertThrows(() => {      resolvePath("foo/../../bar");    }, httpErrors.Forbidden);  },});
test({  name: "resolvePath absolute",  fn() {    assertThrows(      () => {        resolvePath("/dev/null");      },      httpErrors.BadRequest,      "Malicious Path",    );  },});
test({  name: "resolvePath contains null",  fn() {    assertThrows(      () => {        resolvePath("./foo/bar\0baz");      },      httpErrors.BadRequest,      "Malicious Path",    );  },});
test({  name: "resolvePath from root",  fn() {    assertEquals(resolvePath("/public", "./foo/bar"), "/public/foo/bar");  },});