Function TestSecurityDoSViaLargeInputs

pkg/workflow/security_regression_test.go:219–269

============================================================================= DoS Prevention Tests ============================================================================= TestSecurityDoSViaLargeInputs validates that excessively large inputs are handled without causing denial of service.

(t *testing.T)

// TestSecurityDoSViaLargeInputs validates that excessively large inputs
// are handled without causing denial of service.
func TestSecurityDoSViaLargeInputs(t *testing.T) {
	tests := []struct {
		name        string
		contentFunc func() string
		description string
	}{
		{
			name: "very_long_expression",
			contentFunc: func() string {
				// Create a very long but valid expression
				expr := "${{ "
				for i := 0; i < 100; i++ {
					expr += "github.workflow && "
				}
				expr += "github.repository }}"
				return expr
			},
			description: "Very long expression should be handled",
		},
		{
			name: "many_expressions",
			contentFunc: func() string {
				// Many repeated expressions
				var sb strings.Builder
				for i := 0; i < 1000; i++ {
					sb.WriteString("${{ github.workflow }} ")
				}
				return sb.String()
			},
			description: "Many expressions should be handled",
		},
		{
			name: "excessive_whitespace",
			contentFunc: func() string {
				return "${{" + strings.Repeat(" ", 10000) + "github.workflow" + strings.Repeat(" ", 10000) + "}}"
			},
			description: "Excessive whitespace should be handled",
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			content := tt.contentFunc()

			// The parser should handle these without panic or timeout
			// We don't require a specific result, just that it doesn't hang
			err := validateExpressionSafety(content)
			_ = err // We don't care about the result, just that it completes
		})
	}
}

// TestSecurityDoSViaNestedYAML validates that deeply nested YAML structures
// don't cause stack overflow or excessive resource consumption.