b9dfb86260
Security hardening release addressing CodeQL and Dependabot alerts: - Fix stack trace exposure in error responses - Add SSRF protection with DNS resolution checking - Implement proper URL hostname validation (replaces substring matching) - Add centralized path sanitization to prevent path traversal - Fix ReDoS vulnerability in email validation regex - Improve HTML sanitization in validation utilities - Fix capability wildcard matching in auth utilities - Update glob dependency to address CVE - Add CodeQL suppression comments for verified false positives 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
21 lines
699 B
JavaScript
21 lines
699 B
JavaScript
"use strict";
|
|
/**
|
|
* Test setup for utility functions
|
|
*/
|
|
// Mock environment variables for testing
|
|
process.env.JWT_SECRET = 'test-jwt-secret-for-testing-only';
|
|
process.env.MASTER_ENCRYPTION_KEY = 'test-master-key-32-bytes-long-test';
|
|
// Mock crypto for consistent testing
|
|
jest.mock('crypto', () => {
|
|
const originalCrypto = jest.requireActual('crypto');
|
|
return {
|
|
...originalCrypto,
|
|
randomBytes: jest.fn().mockImplementation((size) => {
|
|
return Buffer.alloc(size, 'a'); // Return consistent fake random bytes
|
|
}),
|
|
randomInt: jest.fn().mockReturnValue(5), // Return consistent fake random int
|
|
};
|
|
});
|
|
// Global test timeout
|
|
jest.setTimeout(10000);
|