test: benchmark safe response sanitization path

Signed-off-by: lucarlig <luca.carlig@ibm.com>

Author: lucarlig

tests/performance/test_validation_middleware_rust_benchmark.py

@@ -99,9 +99,7 @@ def _build_python_parameter_runner(max_param_length: int, dangerous_patterns: li
 
     def _run(query_params: dict[str, str]) -> None:
         request = _QueryRequest(query_params)
-        middleware._validate_parameters(
-            [("id", "123"), *list(request.query_params.items())]
-        )
+        middleware._validate_parameters([("id", "123"), *list(request.query_params.items())])
 
     return _run
 
@@ -116,9 +114,7 @@ def _build_rust_parameter_runner(max_param_length: int, dangerous_patterns: list
 
     def _run(query_params: dict[str, str]) -> None:
         request = _QueryRequest(query_params)
-        middleware._validate_parameters(
-            [("id", "123"), *list(request.query_params.items())]
-        )
+        middleware._validate_parameters([("id", "123"), *list(request.query_params.items())])
 
     return _run
 
@@ -401,6 +397,16 @@ async def main() -> None:
     print(f"python_avg_median={python_sanitize_median:.3f}ms rust_avg_median={rust_sanitize_median:.3f}ms")
     print(f"speedup={python_sanitize_median / rust_sanitize_median:.2f}x")
 
+    print("\nresponse_sanitization_safe (1000 iterations)")
+    python_sanitize_safe_median, rust_sanitize_safe_median = await _measure_pair(
+        python_sanitize_fn,
+        rust_sanitize_fn,
+        b"plain-ascii-response-body-" * 256,
+        1000,
+    )
+    print(f"python_avg_median={python_sanitize_safe_median:.3f}ms rust_avg_median={rust_sanitize_safe_median:.3f}ms")
+    print(f"speedup={python_sanitize_safe_median / rust_sanitize_safe_median:.2f}x")
+
     for name, payload, iterations in scenarios:
         body = orjson.dumps(payload)
         print(f"\n{name} ({iterations} iterations)")

tools_rust/validation_middleware_rust/src/lib.rs

@@ -801,6 +801,12 @@ mod tests {
         assert_eq!(sanitized, b"HelloWorld");
     }
 
+    #[test]
+    fn sanitize_response_body_keeps_safe_ascii_unchanged() {
+        let sanitized = sanitize_response_body_bytes(b"plain-ascii-response-body");
+        assert_eq!(sanitized, b"plain-ascii-response-body");
+    }
+
     #[test]
     fn validate_request_checks_parameters_before_json_body() {
         let validator = CompiledValidator {