Remediate PR #853 in response to review #525 for Issue #850

2026-07-23 17:49:31 -05:00
parent a942afe6c4
commit 3b2b4e1dca
4 changed files with 639 additions and 401 deletions
@@ -28,6 +28,21 @@ class TestPathUnderBranches(unittest.TestCase):
            amw.is_path_under_branches("/repo/other-checkout", self.ROOT)
        )

+    def test_unrelated_branches_dir_fails(self):
+        self.assertFalse(
+            amw.is_path_under_branches("/tmp/branches/evil", self.ROOT)
+        )
+
+    def test_prefix_confusion_fails(self):
+        self.assertFalse(
+            amw.is_path_under_branches(f"{self.ROOT}/branches-other/foo", self.ROOT)
+        )
+
+    def test_traversal_fails(self):
+        self.assertFalse(
+            amw.is_path_under_branches(f"{self.ROOT}/branches/../evil", self.ROOT)
+        )
+

 class TestAssessAuthorMutationWorktree(unittest.TestCase):
    ROOT = "/repo/Gitea-Tools"