Ashesh Vashi eb66e6a347 Make the 9.19 security tests pass on Windows. ...

The tests added for the 9.19 storage and connection hardening were
written on Linux and failed on Windows, where the behaviour they check
is correct but expressed differently. The production code is unchanged.

- Skip the Backup, Restore and Import/Export descriptor-based
  symlink-race tests on Windows: opening a file with O_NOFOLLOW and
  handing it to the utility as /dev/fd/N is POSIX-only, and the code
  already passes the real path there.
- Compare credential-file paths after fs_short_path()+forward slashes,
  the short (8.3) form libpq is given on Windows; this is the identity
  on POSIX. Covers the --dbname conninfo call sites, get_complete_file_path,
  client-file isolation and the SSH tunnel identity file.
- Normalise the File Manager closest-parent separator to '/'.
- Drop the other inherited credential variable before checking which
  remove_inherited_libpq_credentials() removes, as the runner's own
  environment may hold PGPASSWORD.
- Use forward slashes in the raw hostile --database value, whose
  backslashes libpq would otherwise treat as escapes, and skip the
  'missing configured file passed through' case on Windows, where such
  a file is disabled (NO_CLIENT_FILE) instead.

2026-10-26 19:02:39 +05:30

..

__init__.py

fix: symlink-based path traversal in file_manager (CWE-61/CWE-22) (#9902)

2026-05-01 16:38:48 +05:30

test_file_encoding_round_trip.py

Give the File Manager save tests an absolute path in desktop mode, where there is no storage directory. #10674

2026-10-25 11:43:20 +05:30

test_filemanager_security.py

Make the 9.19 security tests pass on Windows.

2026-10-26 19:02:39 +05:30