From 0014910638031d1570a19e25347458d83b90d35f Mon Sep 17 00:00:00 2001 From: mirivlad Date: Fri, 17 Jul 2026 06:05:24 +0800 Subject: [PATCH] test(config): keep web settings inside data dir --- internal/server/web_locale_test.go | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/internal/server/web_locale_test.go b/internal/server/web_locale_test.go index 476b33d..57c827a 100644 --- a/internal/server/web_locale_test.go +++ b/internal/server/web_locale_test.go @@ -141,6 +141,19 @@ func TestConfirmationPageUsesSharedTemplateAndEscapesToken(t *testing.T) { } } +func TestNewServerSetsConfigPathInsideDataDirectory(t *testing.T) { + dir := t.TempDir() + cfg := DefaultConfig() + s, err := NewServer(dir+"/server.db", dir+"/data", cfg) + if err != nil { + t.Fatal(err) + } + defer s.Close() + if !strings.HasPrefix(cfg.path, dir+"/data/") { + t.Fatalf("config path escaped data directory: %q", cfg.path) + } +} + func TestWebSessionScopesDoNotCrossAuthorizePages(t *testing.T) { s, err := newTestServer(t) if err != nil {