Function createSubscribedClient

spec/vulnerabilities.spec.js:3677–3695

({ className, masterKey, installationId })

    describe('(GHSA-m983-v2ff-wq65) LiveQuery shared mutable state race across concurrent subscribers', () => {
      // Helper: create a LiveQuery client, wait for open, subscribe, wait for subscription ACK
      async function createSubscribedClient({ className, masterKey, installationId }) {
        const opts = {
          applicationId: 'test',
          serverURL: 'ws://localhost:8378',
          javascriptKey: 'test',
        };
        if (masterKey) {
          opts.masterKey = 'test';
        }
        if (installationId) {
          opts.installationId = installationId;
        }
        const client = new Parse.LiveQueryClient(opts);
        client.open();
        const query = new Parse.Query(className);
        const sub = client.subscribe(query);
        await new Promise(resolve => sub.on('open', resolve));
        return { client, sub };
      }

      async function setupProtectedClass(className) {
        const config = Config.get(Parse.applicationId);