Simon McVittie 01624446aa tests: Add a regression test for GHSA-8688-9x26-hhxj ...

The original reporter used various tricks to find a way for the sandboxed
app to overwrite these locations with symlinks, but for the purposes
of this test, I'm doing the setup outside the sandbox instead: probably
not all of these potential exploit routes are actually possible, but we
defend against all of them symmetrically.

Signed-off-by: Simon McVittie <smcv@collabora.com>
[backported to 1.18.x: adjust test numbering]

2026-08-10 23:30:10 +02:00

..

installed-services

…

services

…

share/xdg-desktop-portal/portals

…

test-keyring

…

test-keyring2

…

apply-extra-static.c

…

can-use-fuse.c

…

can-use-fuse.h

…

flatpak-asan.supp

…

flatpak.supp

…

glib.supp

…

gphoto2-list

…

hold-lock.c

…

http-utils-test-server.py

…

httpcache.c

…

installed-tests.sh.in

…

libpreload.c

…

libtest.sh

…

list-unused.c

…

make-multi-collection-id-repo.sh

…

make-runtime-repos

…

make-test-app.sh

…

make-test-runtime.sh

…

meson.build

…

mock-flatpak.c

…

oci-registry-client.py

…

oci-registry-server.py

…

org.flatpak.Authenticator.test.service.in

…

org.freedesktop.impl.portal.desktop.test.service.in

…

org.test.Hello.png

…

package_version.txt.in

…

session.conf.in

…

tap.test.in

…

test-auth.sh

…

test-authenticator.c

…

test-basic.sh

…

test-build-update-repo.sh

…

test-bundle.sh

…

test-completion.sh

…

test-config.sh

…

test-context.c

…

test-default-remotes.sh

…

test-exports.c

…

test-extension-branch-follow.sh

…

test-extensions.sh

…

test-extra-data.sh

…

test-history.sh

…

test-http-utils.sh

…

test-info.sh

…

test-instance.c

…

test-locale-utils.c

…

test-metadata-validation.sh

…

test-oci-registry.sh

…

test-oci.sh

…

test-override.sh

…

test-portal-impl.c

…

test-portal.c

…

test-preinstall.sh

…

test-prune.sh

…

test-repair.sh

…

test-repo.sh

…

test-run-custom.sh

…

test-run.sh

…

test-seccomp.sh

…

test-sideload.sh

…

test-subset.sh

…

test-summaries.sh

…

test-unused.sh

…

test-update-portal.c

…

test-update-portal.sh

…

test-update-remote-configuration.sh

…

test-upgrade-from-header.sh

…

test-webserver.sh

…

test-wrapper.sh

…

test.filter

…

test.portal.in

…

testapp.c

…

testcommon.c

…

testlib.c

…

testlib.h

…

testlibrary.c

…

try-syscall.c

…

web-server.py

…