Reject unsafe Windows update cache roots

2026-07-16 21:55:57 -04:00
parent f14c0bc37a
commit db7c5f97c0
2 changed files with 12 additions and 1 deletions
@@ -169,6 +169,11 @@ fn windows_installer_reuses_persistent_source_update_cache() {
    assert!(ps1.contains("Assert-NoRelativePathSegments($Path)"));
    assert!(ps1.contains("Assert-NoRelativePathSegments $Path"));
    assert!(ps1.contains("$segment -eq \".\" -or $segment -eq \"..\""));
+    assert!(ps1.contains("$localAppData = Normalize-PathForCompare $env:LOCALAPPDATA"));
+    assert!(ps1.contains(
+        "$localAppDataDosh = Normalize-PathForCompare (Join-Path $env:LOCALAPPDATA \"dosh\")"
+    ));
+    assert!(ps1.contains("$full -eq $localAppData -or $full -eq $localAppDataDosh"));
    assert!(ps1.contains("$sourceCache = Assert-SafeUpdateCache $UpdateCache"));
    assert!(ps1.contains(
        "$fetchArgs = @(\"-C\", $sourceCache, \"fetch\", \"--depth\", \"1\", \"origin\", \"main\")"