test: ReDoS vulnerability of Nano ID regex

vbudovski · Jan 1, 2025 · 3be994c · 3be994c
1 parent bfd84ad
commit 3be994c
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/paseri-lib/src/schemas/string.test.ts b/paseri-lib/src/schemas/string.test.ts
@@ -316,6 +316,16 @@ test('Invalid Nano ID', () => {
     );
 });
 
+test('Nano ID ReDoS', () => {
+    const diagnostics = checkSync(nanoidRegex.source, nanoidRegex.flags);
+    if (diagnostics.status === 'vulnerable') {
+        console.log(`Vulnerable pattern: ${diagnostics.attack.pattern}`);
+    } else if (diagnostics.status === 'unknown') {
+        console.log(`Error: ${diagnostics.error.kind}.`);
+    }
+    expect(diagnostics.status).toBe('safe');
+});
+
 test('Optional', () => {
     const schema = p.string().optional();