use plain pkg module

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

pkg/x/path/filepathx/path_test.go

@@ -0,0 +1,65 @@
+package filepathx_test
+
+import (
+	"testing"
+
+	"github.com/opencloud-eu/opencloud/pkg/x/path/filepathx"
+)
+
+func TestJailJoin(t *testing.T) {
+	type args struct {
+		jail string
+		elem []string
+	}
+
+	tests := []struct {
+		name string
+		args args
+		want string
+	}{
+		{
+			name: "regular use case",
+			args: args{
+				jail: "/",
+				elem: []string{"a", "b", "c"},
+			},
+			want: "/a/b/c",
+		},
+		{
+			name: "access parent directory",
+			args: args{
+				jail: "/",
+				elem: []string{"a", "b", "c", ".."},
+			},
+			want: "/a/b",
+		},
+		{
+			name: "restrict breaking out of jail",
+			args: args{
+				jail: "/",
+				elem: []string{"a", "b", "c", "..", "..", "..", "..", "..", "..", ".."},
+			},
+			want: "/",
+		},
+		{
+			name: "restrict to child of jail",
+			args: args{
+				jail: "/a/b",
+				elem: []string{"a", "b", "c", "..", "..", "..", "..", "..", "..", ".."},
+			},
+			want: "/a/b",
+		},
+	}
+
+	for _, tt := range tests {
+		tt := tt
+
+		t.Run(tt.name, func(t *testing.T) {
+			t.Parallel()
+
+			if got := filepathx.JailJoin(tt.args.jail, tt.args.elem...); got != tt.want {
+				t.Errorf("JailJoin() = %v, want %v", got, tt.want)
+			}
+		})
+	}
+}