From 4bffe048c114b4e11f527f05ddbbd7bbee294210 Mon Sep 17 00:00:00 2001
From: Mark Kornblum <mark.kornblum@gmail.com>
Date: Wed, 30 Nov 2016 15:28:25 -0800
Subject: Don't allow path seperators in generated filenames

---
 lib/system.js       |  4 +++-
 test/system.unit.js | 27 +++++++++++++++++++++++++++
 2 files changed, 30 insertions(+), 1 deletion(-)
 create mode 100644 test/system.unit.js

diff --git a/lib/system.js b/lib/system.js
index 60a55246..9ef713c8 100644
--- a/lib/system.js
+++ b/lib/system.js
@@ -19,6 +19,7 @@ function System (faker) {
     str = str.replace(/\,/g, '_');
     str = str.replace(/\-/g, '_');
     str = str.replace(/\\/g, '_');
+    str = str.replace(/\//g, '_');
     str = str.toLowerCase();
     return str;
   };
@@ -36,6 +37,7 @@ function System (faker) {
     str = str.replace(/\,/g, '_');
     str = str.replace(/\-/g, '_');
     str = str.replace(/\\/g, '_');
+    str = str.replace(/\//g, '_');
     str = str.toLowerCase();
     return str;
   };
@@ -155,4 +157,4 @@ function System (faker) {
 
 }
 
-module['exports'] = System;
\ No newline at end of file
+module['exports'] = System;
diff --git a/test/system.unit.js b/test/system.unit.js
new file mode 100644
index 00000000..1edcb8be
--- /dev/null
+++ b/test/system.unit.js
@@ -0,0 +1,27 @@
+if (typeof module !== 'undefined') {
+    var assert = require('assert');
+    var sinon = require('sinon');
+    var faker = require('../index');
+}
+
+describe("system.js", function () {
+    describe("fileName()", function () {
+        it("returns filenames without system path seperators", function () {
+            sinon.stub(faker.random, 'words').returns('24/7');
+            var fileName = faker.system.fileName();
+            assert.equal(fileName.indexOf('/'), -1, 'generated fileNames should not have path seperators');
+
+            faker.random.words.restore();
+        });
+    });
+
+    describe("commonFileName()", function () {
+        it("returns filenames without system path seperators", function () {
+            sinon.stub(faker.random, 'words').returns('24/7');
+            var fileName = faker.system.commonFileName();
+            assert.equal(fileName.indexOf('/'), -1, 'generated commonFileNames should not have path seperators');
+
+            faker.random.words.restore();
+        });
+    });
+});
-- 
cgit v1.2.3