public-mirrors/composer
1
0
Fork 0
mirror of https://github.com/composer/composer synced 2025-05-10 00:53:06 +00:00
Code Activity

Fix possible vendor-dir "evasion" via target-dir

Browse source
This commit is contained in:
Jordi Boggiano 2012-09-18 18:30:11 +02:00
parent ebc9c73008
commit f377e9ca87
2 changed files with 20 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

15
tests/Composer/Test/Package/CompletePackageTest.php
View file

@ -71,4 +71,19 @@ class CompletePackageTest extends TestCase
$this->assertEquals(strtolower($name).'-'.$normVersion, (string) $package);
}
public function testGetTargetDir()
{
$package = new Package('a', '1.0.0.0', '1.0');
$this->assertNull($package->getTargetDir());
$package->setTargetDir('./../foo/');
$this->assertEquals('foo/', $package->getTargetDir());
$package->setTargetDir('foo/../../../bar/');
$this->assertEquals('foo/bar/', $package->getTargetDir());
$package->setTargetDir('../..');
$this->assertEquals('', $package->getTargetDir());
}
}