Files
flatpak/tests
Alexander Larsson 2cdd1e1e5a Add test coverage for --persist
This adds three "positive" tests: the common case --persist=.persist, the
deprecated spelling --persist=/.persist, and the less common special case
--persist=. as used by Steam.

It also adds "negative" tests for CVE-2024-42472: if the --persist
directory is a symbolic link or contains path segment "..", we want that
to be rejected.

Reproduces: CVE-2024-42472, GHSA-7hgv-f2j8-xw87
[smcv: Add "positive" tests]
[smcv: Exercise --persist=..]
[smcv: Assert that --persist with a symlink produces expected message]
Co-authored-by: Simon McVittie <smcv@collabora.com>
Signed-off-by: Simon McVittie <smcv@collabora.com>
2024-08-12 19:33:25 +01:00
..
2022-10-24 16:12:14 +01:00
2022-10-24 16:12:14 +01:00
2019-12-17 14:55:13 +01:00
2024-05-13 14:10:14 -05:00
2016-02-25 19:03:09 +01:00
2022-10-24 16:12:14 +01:00
2020-03-20 15:37:10 +01:00
2024-02-13 08:20:57 -06:00
2024-05-13 14:10:14 -05:00
2024-08-12 19:33:25 +01:00
2024-02-13 08:20:57 -06:00
2022-08-22 19:48:10 -07:00