Reject unsafe Windows update cache segments

2026-07-12 22:37:51 -04:00
parent c0b9e17214
commit b076a84dc7
2 changed files with 12 additions and 0 deletions
@@ -99,6 +99,9 @@ fn installers_refuse_prebuilts_without_checksums() {
 fn windows_installer_reuses_persistent_source_update_cache() {
    let ps1 = include_str!("../install.ps1");
    assert!(ps1.contains("DOSH_UPDATE_CACHE"));
+    assert!(ps1.contains("Assert-NoRelativePathSegments($Path)"));
+    assert!(ps1.contains("Assert-NoRelativePathSegments $Path"));
+    assert!(ps1.contains("$segment -eq \".\" -or $segment -eq \"..\""));
    assert!(ps1.contains("$sourceCache = Assert-SafeUpdateCache $UpdateCache"));
    assert!(ps1.contains("git -C $sourceCache fetch --depth 1 origin main"));
    assert!(ps1.contains("git -C $sourceCache checkout -q -B main FETCH_HEAD"));