# Adversarial path corpus for validate_path_for_deletion.
# Every path in this file MUST be rejected (validate returns non-zero).
# Lines starting with # or empty are ignored. No quoting.
# When adding entries: prefer real-world attacks over synthetic ones.
#
# Categories (kept grouped for review, not parsed):

# ---- empty / not absolute ----
relative/path
./foo
foo/bar
~/Documents
just-a-name

# ---- root and top-level system dirs ----
/
/bin
/sbin
/usr
/usr/bin
/usr/sbin
/usr/lib
/System
/Library/Extensions
/private
/etc
/private/etc
/var
/var/db
/private/var
/private/var/db

# ---- shallow system files ----
/bin/bash
/bin/sh
/sbin/init
/usr/bin/ls
/usr/lib/dyld
/System/Library/CoreServices/Finder.app
/etc/passwd
/etc/sudoers
/private/etc/passwd
/var/db/dslocal
/private/var/db/dslocal/nodes/Default/users/root.plist

# ---- path traversal variants ----
/../etc/passwd
/Users/../etc/passwd
/Users/me/../../etc
/private/var/db/../../../etc/passwd
/var/../etc/passwd
/Users/me/Documents/../../../etc
/../../../../../etc

# ---- control character injection ----
/Users/me/foo	bar

# ---- protected system caches ----
/System/Library/Caches
/System/Library/Caches/com.apple.kext.caches
/Library/Apple
/Library/Apple/System
/System/Library
/System/Volumes/Data/System
/System/Library/PrivateFrameworks

# ---- protected app/data namespaces ----
/Applications/Safari.app
/Applications/Finder.app
/System/Applications/Mail.app
/System/Applications/Settings.app
/System/Applications/Utilities/Keychain Access.app
/Library/Keychains
/Library/Keychains/login.keychain-db

# ---- /var/db sensitive subtrees ----
/var/db/sudo
/var/db/SystemPolicy
/var/db/locationd
/var/db/uuidtext
/private/var/db/sudo
/private/var/db/SystemPolicy

# ---- attempts to escape with weird separators ----
//etc/passwd
///System
/etc/./passwd
/etc/.
/etc/..
/System/.

# ---- attempts to look like /private aliases ----
/private/etc/sudoers
/private/etc/master.passwd
/private/var/audit
/private/var/folders/..

# ---- realistic user-facing oopses ----
/Users
/Users/Shared
/Users/Guest

# ---- realistic mistakes that should still fail (no absolute prefix) ----
Library/Caches/com.apple.spotlight
.Trash
.cache/foo
