45f18d3122
- 升级 npm/uv 锁文件中的漏洞依赖，并移除未使用的 python-jose 以消除 ecdsa 预警 - 收紧 viewer/thread/sandbox 路径解析边界，补充路径逃逸测试 - 更新 roadmap 记录本次安全修复
44 lines
1.6 KiB
Python
44 lines
1.6 KiB
Python
from __future__ import annotations
|
|
|
|
from pathlib import Path
|
|
|
|
import pytest
|
|
from fastapi import HTTPException
|
|
|
|
from yuxi.agents.backends.sandbox import paths as sandbox_paths
|
|
from yuxi.services import viewer_filesystem_service as svc
|
|
|
|
|
|
def test_resolve_local_user_data_path_blocks_upload_symlink_escape(tmp_path: Path, monkeypatch) -> None:
|
|
monkeypatch.setattr(sandbox_paths.conf, "save_dir", str(tmp_path))
|
|
thread_id = "thread-1"
|
|
uid = "user-1"
|
|
sandbox_paths.ensure_thread_dirs(thread_id, uid)
|
|
|
|
outside_file = tmp_path / "outside.txt"
|
|
outside_file.write_text("outside", encoding="utf-8")
|
|
escape_link = sandbox_paths.sandbox_uploads_dir(thread_id) / "escape.txt"
|
|
escape_link.symlink_to(outside_file)
|
|
|
|
with pytest.raises(HTTPException) as exc_info:
|
|
svc._resolve_local_user_data_path(thread_id, uid, "/home/gem/user-data/uploads/escape.txt")
|
|
|
|
assert exc_info.value.status_code == 403
|
|
|
|
|
|
def test_list_local_entries_skips_symlink_escape(tmp_path: Path, monkeypatch) -> None:
|
|
monkeypatch.setattr(sandbox_paths.conf, "save_dir", str(tmp_path))
|
|
thread_id = "thread-1"
|
|
uid = "user-1"
|
|
sandbox_paths.ensure_thread_dirs(thread_id, uid)
|
|
|
|
uploads_dir = sandbox_paths.sandbox_uploads_dir(thread_id)
|
|
(uploads_dir / "safe.txt").write_text("safe", encoding="utf-8")
|
|
outside_file = tmp_path / "outside.txt"
|
|
outside_file.write_text("outside", encoding="utf-8")
|
|
(uploads_dir / "escape.txt").symlink_to(outside_file)
|
|
|
|
entries = svc._list_local_entries(thread_id, uid, uploads_dir)
|
|
|
|
assert {entry["path"] for entry in entries} == {"/home/gem/user-data/uploads/safe.txt"}
|