zeek/auxil/zeek-aux/testing/zeek-archiver/command-injection-filenames.test
Patrick Kelley 8fd444092b initial
2025-05-07 15:35:15 -04:00

13 lines
399 B
Plaintext

# Verify that commands injected via filenames do not execute.
# @TEST-EXEC: bash %INPUT
. "$SCRIPTS/zeek-archiver-common.sh"
log_in='test;uptime;__2020-07-16-09-43-10__2020-07-16-09-43-10__.log'
log_out='test;uptime;.09:43:10-09:43:10.log'
echo hello > "$(queue_dir)/${log_in}"
zeek-archiver -1 -v "$(queue_dir)" "$(archive_dir)"
test "$(gunzip <"$(archive_date_dir)/${log_out}.gz")" == "hello"