test: add HTTP path traversal test

charmbracelet · May 6, 2022 · 24b4bbd · 24b4bbd
1 parent 3c90668
commit 24b4bbd
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/server/http_test.go b/server/http_test.go
@@ -0,0 +1,20 @@
+package server_test
+
+import (
+	"testing"
+
+	"github.com/charmbracelet/charm/testserver"
+)
+
+func TestHTTPAccess(t *testing.T) {
+	cl := testserver.SetupTestServer(t)
+	_, err := cl.Auth()
+	if err != nil {
+		t.Fatalf("auth error: %s", err)
+	}
+
+	_, err = cl.AuthedRawRequest("GET", "/v1/fs/../../db/charm_sqlite.db")
+	if err == nil {
+		t.Fatalf("expected access error, got nil")
+	}
+}