mirror of
				https://github.com/neovim/neovim.git
				synced 2025-10-26 12:27:24 +00:00 
			
		
		
		
	 f004812b33
			
		
	
	f004812b33
	
	
	
		
			
			Introduce vim.secure.trust() to programmatically manage the trust database. Use this function in a new :trust ex command which can be used as a simple frontend. Resolves: https://github.com/neovim/neovim/issues/21092 Co-authored-by: Gregory Anders <greg@gpanders.com> Co-authored-by: ii14 <ii14@users.noreply.github.com>
		
			
				
	
	
		
			177 lines
		
	
	
		
			8.8 KiB
		
	
	
	
		
			Lua
		
	
	
	
	
	
			
		
		
	
	
			177 lines
		
	
	
		
			8.8 KiB
		
	
	
	
		
			Lua
		
	
	
	
	
	
| local helpers = require('test.functional.helpers')(after_each)
 | |
| local Screen = require('test.functional.ui.screen')
 | |
| 
 | |
| local eq = helpers.eq
 | |
| local clear = helpers.clear
 | |
| local command = helpers.command
 | |
| local pathsep = helpers.get_pathsep()
 | |
| local is_os = helpers.is_os
 | |
| local funcs = helpers.funcs
 | |
| 
 | |
| describe(':trust', function()
 | |
|   local xstate = 'Xstate'
 | |
| 
 | |
|   setup(function()
 | |
|     helpers.mkdir_p(xstate .. pathsep .. (is_os('win') and 'nvim-data' or 'nvim'))
 | |
|   end)
 | |
| 
 | |
|   teardown(function()
 | |
|     helpers.rmdir(xstate)
 | |
|   end)
 | |
| 
 | |
|   before_each(function()
 | |
|     helpers.write_file('test_file', 'test')
 | |
|     clear{env={XDG_STATE_HOME=xstate}}
 | |
|   end)
 | |
| 
 | |
|   after_each(function()
 | |
|     os.remove('test_file')
 | |
|   end)
 | |
| 
 | |
|   it('trust then deny then remove a file using current buffer', function()
 | |
|     local screen = Screen.new(80, 8)
 | |
|     screen:attach()
 | |
|     screen:set_default_attr_ids({
 | |
|       [1] = {bold = true, foreground = Screen.colors.Blue1},
 | |
|     })
 | |
| 
 | |
|     local cwd = funcs.getcwd()
 | |
|     local hash = funcs.sha256(helpers.read_file('test_file'))
 | |
| 
 | |
|     command('edit test_file')
 | |
|     command('trust')
 | |
|     screen:expect([[
 | |
|       ^test                                                                            |
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       "]] .. cwd .. pathsep .. [[test_file" trusted.{MATCH:%s+}|
 | |
|     ]])
 | |
|     local trust = helpers.read_file(funcs.stdpath('state') .. pathsep .. 'trust')
 | |
|     eq(string.format('%s %s', hash, cwd .. pathsep .. 'test_file'), vim.trim(trust))
 | |
| 
 | |
|     command('trust ++deny')
 | |
|     screen:expect([[
 | |
|       ^test                                                                            |
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       "]] .. cwd .. pathsep .. [[test_file" denied.{MATCH:%s+}|
 | |
|     ]])
 | |
|     trust = helpers.read_file(funcs.stdpath('state') .. pathsep .. 'trust')
 | |
|     eq(string.format('! %s', cwd .. pathsep .. 'test_file'), vim.trim(trust))
 | |
| 
 | |
|     command('trust ++remove')
 | |
|     screen:expect([[
 | |
|       ^test                                                                            |
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       "]] .. cwd .. pathsep .. [[test_file" removed.{MATCH:%s+}|
 | |
|     ]])
 | |
|     trust = helpers.read_file(funcs.stdpath('state') .. pathsep .. 'trust')
 | |
|     eq(string.format(''), vim.trim(trust))
 | |
|   end)
 | |
| 
 | |
|   it('deny then trust then remove a file using current buffer', function()
 | |
|     local screen = Screen.new(80, 8)
 | |
|     screen:attach()
 | |
|     screen:set_default_attr_ids({
 | |
|       [1] = {bold = true, foreground = Screen.colors.Blue1},
 | |
|     })
 | |
| 
 | |
|     local cwd = funcs.getcwd()
 | |
|     local hash = funcs.sha256(helpers.read_file('test_file'))
 | |
| 
 | |
|     command('edit test_file')
 | |
|     command('trust ++deny')
 | |
|     screen:expect([[
 | |
|       ^test                                                                            |
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       "]] .. cwd .. pathsep .. [[test_file" denied.{MATCH:%s+}|
 | |
|     ]])
 | |
|     local trust = helpers.read_file(funcs.stdpath('state') .. pathsep .. 'trust')
 | |
|     eq(string.format('! %s', cwd .. pathsep .. 'test_file'), vim.trim(trust))
 | |
| 
 | |
|     command('trust')
 | |
|     screen:expect([[
 | |
|       ^test                                                                            |
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       "]] .. cwd .. pathsep .. [[test_file" trusted.{MATCH:%s+}|
 | |
|     ]])
 | |
|     trust = helpers.read_file(funcs.stdpath('state') .. pathsep .. 'trust')
 | |
|     eq(string.format('%s %s', hash, cwd .. pathsep .. 'test_file'), vim.trim(trust))
 | |
| 
 | |
|     command('trust ++remove')
 | |
|     screen:expect([[
 | |
|       ^test                                                                            |
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       "]] .. cwd .. pathsep .. [[test_file" removed.{MATCH:%s+}|
 | |
|     ]])
 | |
|     trust = helpers.read_file(funcs.stdpath('state') .. pathsep .. 'trust')
 | |
|     eq(string.format(''), vim.trim(trust))
 | |
|   end)
 | |
| 
 | |
|   it('deny then remove a file using file path', function()
 | |
|     local screen = Screen.new(80, 8)
 | |
|     screen:attach()
 | |
|     screen:set_default_attr_ids({
 | |
|       [1] = {bold = true, foreground = Screen.colors.Blue1},
 | |
|     })
 | |
| 
 | |
|     local cwd = funcs.getcwd()
 | |
| 
 | |
|     command('trust ++deny test_file')
 | |
|     screen:expect([[
 | |
|       ^                                                                                |
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       "]] .. cwd .. pathsep .. [[test_file" denied.{MATCH:%s+}|
 | |
|     ]])
 | |
|     local trust = helpers.read_file(funcs.stdpath('state') .. pathsep .. 'trust')
 | |
|     eq(string.format('! %s', cwd .. pathsep .. 'test_file'), vim.trim(trust))
 | |
| 
 | |
|     command('trust ++remove test_file')
 | |
|     screen:expect([[
 | |
|       ^                                                                                |
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       {1:~                                                                               }|
 | |
|       "]] .. cwd .. pathsep .. [[test_file" removed.{MATCH:%s+}|
 | |
|     ]])
 | |
|     trust = helpers.read_file(funcs.stdpath('state') .. pathsep .. 'trust')
 | |
|     eq(string.format(''), vim.trim(trust))
 | |
|   end)
 | |
| end)
 |