}

    /**
     * Check if path is whitelisted
     */
    private boolean isWhitelisted(String path) {
        if (whitelistedPaths.isEmpty()) {
            return true; // No whitelist means all paths allowed
        }

        String lowerPath = path.toLowerCase();
        for (String whitelisted : whitelistedPaths) {
            if (lowerPath.startsWith(whitelisted) || lowerPath.equals(whitelisted)) {

        // Should allow whitelisted path
        String allowed = validator.validatePath("\\share\\allowed\\file.txt");
        assertEquals("\\share\\allowed\\file.txt", allowed);

        // Should block non-whitelisted path
        try {
            validator.validatePath("\\share\\other\\file.txt");
            fail("Should block non-whitelisted path");
        } catch (SmbException e) {

	"encoding/base64"
	"fmt"
	"net/http"
	"net/url"
	"sort"
	"strconv"
	"strings"

	xhttp "github.com/minio/minio/internal/http"

	"github.com/minio/minio/internal/auth"
)

// Whitelist resource list that will be used in query string for signature-V2 calculation.
//
// This list should be kept alphabetically sorted, do not hastily edit.
var resourceList = []string{
	"acl",
	"cors",
	"delete",