openclaw/src/security/safe-regex.test.ts

import { describe, expect, it } from "vitest";
import { compileSafeRegex, hasNestedRepetition, testRegexWithBoundedInput } from "./safe-regex.js";

describe("safe regex", () => {
  it("flags nested repetition patterns", () => {
    expect(hasNestedRepetition("(a+)+$")).toBe(true);
    expect(hasNestedRepetition("(a|aa)+$")).toBe(true);
    expect(hasNestedRepetition("^(?:foo|bar)$")).toBe(false);
    expect(hasNestedRepetition("^(ab|cd)+$")).toBe(false);
  });

  it("rejects unsafe nested repetition during compile", () => {
    expect(compileSafeRegex("(a+)+$")).toBeNull();
    expect(compileSafeRegex("(a|aa)+$")).toBeNull();
    expect(compileSafeRegex("(a|aa){2}$")).toBeInstanceOf(RegExp);
  });

  it("compiles common safe filter regex", () => {
    const re = compileSafeRegex("^agent:.*:discord:");
    expect(re).toBeInstanceOf(RegExp);
    expect(re?.test("agent:main:discord:channel:123")).toBe(true);
    expect(re?.test("agent:main:telegram:channel:123")).toBe(false);
  });

  it("supports explicit flags", () => {
    const re = compileSafeRegex("token=([A-Za-z0-9]+)", "gi");
    expect(re).toBeInstanceOf(RegExp);
    expect("TOKEN=abcd1234".replace(re as RegExp, "***")).toBe("***");
  });

  it("checks bounded regex windows for long inputs", () => {
    expect(
      testRegexWithBoundedInput(/^agent:main:discord:/, `agent:main:discord:${"x".repeat(5000)}`),
    ).toBe(true);
    expect(testRegexWithBoundedInput(/discord:tail$/, `${"x".repeat(5000)}discord:tail`)).toBe(
      true,
    );
    expect(testRegexWithBoundedInput(/discord:tail$/, `${"x".repeat(5000)}telegram:tail`)).toBe(
      false,
    );
  });
});