Files
openclaw/src/test-utils/secret-ref-test-vectors.ts
Josh Avant d30dc28b8c Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)
* Secrets: harden exec SecretRef validation and reload LKG coverage

* Tests: harden exec fast-exit stdin regression case

* Tests: align lifecycle daemon test formatting with oxfmt 0.36
2026-03-10 13:45:37 -05:00

25 lines
407 B
TypeScript

export const VALID_EXEC_SECRET_REF_IDS = [
"vault/openai/api-key",
"vault:secret/mykey",
"providers/openai/apiKey",
"a..b/c",
"a/.../b",
"a/.well-known/key",
`a/${"b".repeat(254)}`,
] as const;
export const INVALID_EXEC_SECRET_REF_IDS = [
"",
" ",
"a/../b",
"a/./b",
"../b",
"./b",
"a/..",
"a/.",
"/absolute/path",
"bad id",
"a\\b",
`a${"b".repeat(256)}`,
] as const;