Index: openacs-4/packages/xowiki/tcl/test/api-test-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/tcl/test/Attic/api-test-procs.tcl,v
diff -u -N
--- /dev/null	1 Jan 1970 00:00:00 -0000
+++ openacs-4/packages/xowiki/tcl/test/api-test-procs.tcl	28 Jun 2019 10:08:48 -0000	1.1.2.1
@@ -0,0 +1,42 @@
+aa_register_case \
+    -init_classes {xowiki_require_test_instance} \
+    -cats {smoke production_safe} \
+    package_api_calls {
+
+    Checks various API calls on package level
+
+    @author Gustaf Neumann
+} {
+
+    set instance $_test_instance_name
+    ::xowiki::Package initialize -url $_test_instance_name
+
+    #
+    # Don't allow addressing outside of the jail
+    #
+    foreach pair {
+        {"view-default" "view-default"}
+        {"view-default/." "view-default"}
+        {"./view-default/." "view-default"}
+        {"../view-default/." "view-default"}
+        {"../../view-default/." "view-default"}
+        {"/../../view-default/." "view-default"}
+        {".." ""}
+        {"/../../view-default/../" ""}
+        {"/etc/hosts" "etc/hosts"}
+        {"//etc/hosts" "etc/hosts"}
+        {"/../etc/hosts" "etc/hosts"}
+        {"view-default/../../etc" "etc"}
+        {"view-default/../../../../../etc" "etc"}
+    } {
+        lassign $pair path expected
+        aa_equals "check $path -> $expected" [$package_id normalize_path $path] $expected
+    }
+}
+
+#
+# Local variables:
+#    mode: tcl
+#    tcl-indent-level: 4
+#    indent-tabs-mode: nil
+# End: