anti
5ac8e0f91a
honeydoc previously emitted HTML only — operators picking 'Document' out of the dropdown got a .html file dropped at /Documents/ quarterly_report.docx, which any attacker would clock the moment they ran 'file' on it. Two new generators that emit the real artifact format: - honeydoc_docx: stdlib zipfile only. Builds a minimal but valid Office Open XML zip with the same Q3 review body as the HTML flavor and an external-image relationship pointing at the callback URL — same trick the operator-upload DOCX instrumenter uses, fetched on document open by Word and LibreOffice. Reuses _drawing() and _next_rid() from instrumenters/docx.py to keep the body/relationships shape identical between synthesised and instrumented files. - honeydoc_pdf: pikepdf-backed. One-page PDF in the 14 base fonts (Helvetica, no font embedding), realistic body, /OpenAction /URI on the catalog so most viewers fire the callback on document open. Falls back to a clear error if pikepdf is missing so the operator can switch to honeydoc / honeydoc_docx. Default placement paths now reflect each generator's true extension (.html / .docx / .pdf) so the UI suggests something sensible. Both generators surfaced in the New Token modal's generator dropdown.
69 lines
2.3 KiB
Python
69 lines
2.3 KiB
Python
"""Coverage for the persona-aware path resolver + placement validator."""
|
|
from __future__ import annotations
|
|
|
|
import pytest
|
|
|
|
from decnet.canary.paths import (
|
|
DEFAULT_LINUX_USER,
|
|
DEFAULT_WINDOWS_USER,
|
|
default_path_for,
|
|
default_user,
|
|
normalize_placement,
|
|
)
|
|
|
|
|
|
def test_default_user_dispatch() -> None:
|
|
assert default_user("linux") == DEFAULT_LINUX_USER
|
|
assert default_user("windows") == DEFAULT_WINDOWS_USER
|
|
# Unknown personas fall through to Linux — better to plant than fail.
|
|
assert default_user("aix") == DEFAULT_LINUX_USER
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"generator, persona, expected_substr",
|
|
[
|
|
("aws_creds", "linux", "/home/admin/.aws/credentials"),
|
|
("aws_creds", "windows", "/home/Administrator/.aws/credentials"),
|
|
("env_file", "linux", "/home/admin/.env"),
|
|
("env_file", "windows", "/home/Administrator/Desktop/prod.env"),
|
|
("git_config", "linux", "/home/admin/.git/config"),
|
|
("ssh_key", "linux", "/home/admin/.ssh/id_rsa"),
|
|
("honeydoc", "linux", "/home/admin/Documents/quarterly_report.html"),
|
|
("honeydoc_docx", "linux", "/home/admin/Documents/quarterly_report.docx"),
|
|
("honeydoc_pdf", "linux", "/home/admin/Documents/quarterly_report.pdf"),
|
|
],
|
|
)
|
|
def test_default_path_for_known_generators(
|
|
generator: str, persona: str, expected_substr: str,
|
|
) -> None:
|
|
assert default_path_for(generator, persona) == expected_substr
|
|
|
|
|
|
def test_default_path_for_unknown_generator_falls_through() -> None:
|
|
# Unknown generator — defensive /tmp drop. The API rejects unknowns
|
|
# upstream, but the resolver shouldn't crash if one slips through.
|
|
assert default_path_for("bogus") == "/tmp/bogus.canary"
|
|
|
|
|
|
def test_normalize_placement_accepts_clean_paths() -> None:
|
|
assert normalize_placement("/home/admin/.env") == "/home/admin/.env"
|
|
assert normalize_placement("/var/lib/x") == "/var/lib/x"
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"bad",
|
|
[
|
|
"",
|
|
"relative/path",
|
|
"./still-relative",
|
|
"/path/with\x00nul",
|
|
"/path/with\nnewline",
|
|
"/path/with\rcr",
|
|
"/path/../escape",
|
|
"/trailing/..",
|
|
],
|
|
)
|
|
def test_normalize_placement_rejects_bad(bad: str) -> None:
|
|
with pytest.raises(ValueError):
|
|
normalize_placement(bad)
|