fix(andreknie.de): improve mobile dock and resource requests

2026-07-28 20:54:08 +02:00
parent 0459daa074
commit 8236cce85c
12 changed files with 219 additions and 61 deletions
@@ -125,4 +125,10 @@ describe('validateResourceDownload', () => {
    expect(result.valid).toBe(false)
    expect(result.errors.resource_id).toBeTruthy()
  })
+
+  it('fails for a resource id that could escape the resource naming scheme', () => {
+    const result = validateResourceDownload({ ...valid, resource_id: '../profile' })
+    expect(result.valid).toBe(false)
+    expect(result.errors.resource_id).toBeTruthy()
+  })
 })