bitwarden/browser
1
0
Fork 0
mirror of https://github.com/bitwarden/browser synced 2025-12-06 00:13:28 +00:00
Code Issues Releases Wiki Activity

[CSA-28] Use path normalization in API requests (#4580)

Browse Source 
* Use path normalization in API requests

* Remove CLI webpack config change that's unneeded

* Add additional tests
This commit is contained in:
Matt Bishop
2023-02-03 14:24:49 -05:00
committed by GitHub
parent ff143760d4
commit 6df37dd715
5 changed files with 34 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
libs/common/spec/misc/utils.spec.ts
View File

@@ -326,4 +326,24 @@ describe("Utils Service", () => {
);
});
});
describe("normalizePath", () => {
it("removes a single traversal", () => {
expect(Utils.normalizePath("../test")).toBe("test");
});
it("removes deep traversals", () => {
expect(Utils.normalizePath("../../test")).toBe("test");
});
it("removes intermediate traversals", () => {
expect(Utils.normalizePath("test/../test")).toBe("test");
});
it("removes multiple encoded traversals", () => {
expect(
Utils.normalizePath("api/sends/access/..%2f..%2f..%2fapi%2fsends%2faccess%2fsendkey")
).toBe("api/sends/access/sendkey");
});
});
});