Most tests

kaakaww · May 11, 2022 · bc45ebb · bc45ebb
1 parent 1c110e6
commit bc45ebb
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/test/kotlin/com/stackhawk/pathtraversalcheck/PathTraversalCheckApplicationTests.kt b/src/test/kotlin/com/stackhawk/pathtraversalcheck/PathTraversalCheckApplicationTests.kt
@@ -51,14 +51,17 @@ class PathTraversalCheckApplicationTests(@Autowired val mockMvc: MockMvc) {
         getPath("/hello", HttpStatus.OK)
 
         getPath("/../usr_content.bak/hello", HttpStatus.INTERNAL_SERVER_ERROR)
+        getPath("/../usr_content.bak/../../etc/passwd", HttpStatus.INTERNAL_SERVER_ERROR)
         getPath("/../../usr_content.bak/hello", HttpStatus.INTERNAL_SERVER_ERROR)
         getPath("/./user_content.bak/hello", HttpStatus.INTERNAL_SERVER_ERROR)
         getPath("/usr_content.bak/hello", HttpStatus.INTERNAL_SERVER_ERROR)
 
         getPath("/../usr_content/hello", HttpStatus.INTERNAL_SERVER_ERROR)
+        getPath("/../usr_content/hello/../../etc/passwd", HttpStatus.INTERNAL_SERVER_ERROR)
 
         getPath("hello", HttpStatus.INTERNAL_SERVER_ERROR)
         getPath("../hello", HttpStatus.INTERNAL_SERVER_ERROR)
+        getPath("/hello/../../etc/passwd", HttpStatus.INTERNAL_SERVER_ERROR)
     }
 
     fun getPath(path: String, status: HttpStatus) {