mirrors/bun.sh
1
0
Fork 0
mirror of https://github.com/oven-sh/bun synced 2026-02-16 22:01:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

test: use module-scope imports and tempDir from harness

Browse Source 
Replace dynamic `await import("fs")` / `await import("os")` with
`tempDir` from harness for temporary directory creation.

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Claude Bot
2026-02-12 07:05:30 +00:00
parent 647ce82494
commit 0177c433ec
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
test/regression/issue/header-injection-content-disposition.test.ts
View File

@@ -1,4 +1,5 @@
import { expect, test } from "bun:test";
import { tempDir } from "harness";
test("Content-Disposition header injection via CRLF in File name", async () => {
await using server = Bun.serve({
@@ -57,12 +58,10 @@ test("Content-Disposition header injection via quotes in File name", async () =>
});
test("Content-Disposition header injection via Bun.file with crafted path", async () => {
// Create a file with CRLF in the name on the filesystem (Linux allows this)
const fs = await import("fs");
const os = await import("os");
const tmpDir = fs.mkdtempSync(os.tmpdir() + "/bun-test-crlf-");
// Create a temp dir, then add a file with CRLF in its name (Linux allows this)
using dir = tempDir("crlf-filename", {});
const maliciousFilename = "evil.bin\r\nX-Injected: true";
const filePath = tmpDir + "/" + maliciousFilename;
const filePath = `${dir}/${maliciousFilename}`;
let fileCreated = false;
try {