Harden security test fixtures by coder13 · Pull Request #229 · coder13/LetsCube

coder13 · 2026-07-14T02:26:34Z

Summary\n- mount the friends REST test fixture behind the production API rate limiter\n- exercise the CSRF fixture through a trusted HTTPS proxy and require a secure session cookie\n\nNo CodeQL suppressions or production security relaxations.\n\nFixes #226\nRelated to #227\n\n## Verification\n- yarn workspace v1.22.22

yarn run v1.22.22
$ jest --passWithNoTests --runInBand api/friends.test.js middlewares/csrf.test.js
Done in 0.77s.
Done in 0.91s.\n- yarn workspace v1.22.22
yarn run v1.22.22
$ eslint ./

/tmp/letscube-codeql-fixture-security/server/features.test.js
8:3 warning Unused eslint-disable directive (no problems were reported from 'global-require')

/tmp/letscube-codeql-fixture-security/server/postgres/dualWrite.js
1:1 warning Unused eslint-disable directive (no problems were reported from 'no-await-in-loop', 'no-continue', or 'no-restricted-syntax')

/tmp/letscube-codeql-fixture-security/server/runtimeConfig.test.js
3:1 warning Unused eslint-disable directive (no problems were reported from 'global-require')

/tmp/letscube-codeql-fixture-security/server/social/relationshipService.js
1:1 warning Unused eslint-disable directive (no problems were reported from 'no-await-in-loop' or 'no-continue')

✖ 4 problems (0 errors, 4 warnings)
0 errors and 4 warnings potentially fixable with the --fix option.

Done in 0.67s.
Done in 0.80s.\n- commit hook: yarn run v1.22.22
$ turbo run lint

• Packages in scope: letscube-client, letscube-scrambles, letscube-server
• Running lint in 3 packages
• Remote caching disabled, using shared worktree cache

letscube-server:lint: cache hit, replaying logs ea4536ccb2aa083b
letscube-client:lint: cache hit, replaying logs a6b4fb101bbc4e43
letscube-scrambles:lint: cache hit, replaying logs 4f5a0d3c3843eab0
letscube-server:lint: yarn run v1.22.22
letscube-server:lint: $ eslint ./
letscube-server:lint: (node:3536946) ESLintEnvWarning: /* eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/api/friends.test.js at line 2.
letscube-client:lint: yarn run v1.22.22
letscube-server:lint: (Use node --trace-warnings ... to show where the warning was created)
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/api.test.js at line 2.
letscube-client:lint: $ eslint ./src/
letscube-client:lint: Done in 3.02s.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/auth/index.test.js at line 2.
letscube-scrambles:lint: yarn run v1.22.22
letscube-scrambles:lint: $ eslint ./
letscube-scrambles:lint: Done in 0.47s.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/auth/testUser.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/auth/wcaProfile.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/database.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/features.test.js at line 1.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/health.test.js at line 1.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/metrics.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/middlewares/apiRateLimit.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/middlewares/csrf.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/models/friendRelationship.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/models/user.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/postgres/dualWrite.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/privacy/userEmailPurge.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/realtime/socialEvents.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/requestLogging.test.js at line 1.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/runtimeConfig.test.js at line 1.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/social/discoveryService.test.js at line 1.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/social/notificationService.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/social/raceInvitationService.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/social/relationshipService.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/social/requestRateLimiter.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/socket/lib/reconnectGrace.test.js at line 1.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/socket/lib/resultSubmission.test.js at line 1.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/socket/lib/roomAvailability.test.js at line 1.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/socket/middlewares/logger.test.js at line 1.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/socket/namespaces/default.test.js at line 1.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/socket/namespaces/rooms.test.js at line 1.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/username.test.js at line 2.
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global / comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/usernameBackfill.test.js at line 2.
letscube-server:lint:
letscube-server:lint: /tmp/letscube-codeql-fixture-security/server/features.test.js
letscube-server:lint: 8:3 warning Unused eslint-disable directive (no problems were reported from 'global-require')
letscube-server:lint:
letscube-server:lint: /tmp/letscube-codeql-fixture-security/server/postgres/dualWrite.js
letscube-server:lint: 1:1 warning Unused eslint-disable directive (no problems were reported from 'no-await-in-loop', 'no-continue', or 'no-restricted-syntax')
letscube-server:lint:
letscube-server:lint: /tmp/letscube-codeql-fixture-security/server/runtimeConfig.test.js
letscube-server:lint: 3:1 warning Unused eslint-disable directive (no problems were reported from 'global-require')
letscube-server:lint:
letscube-server:lint: /tmp/letscube-codeql-fixture-security/server/social/relationshipService.js
letscube-server:lint: 1:1 warning Unused eslint-disable directive (no problems were reported from 'no-await-in-loop' or 'no-continue')
letscube-server:lint:
letscube-server:lint: ✖ 4 problems (0 errors, 4 warnings)
letscube-server:lint: 0 errors and 4 warnings potentially fixable with the --fix option.
letscube-server:lint:
letscube-server:lint: (node:3536946) ESLintEnvWarning: / eslint-env / comments are no longer recognized when linting with flat config and will be reported as errors as of v10.0.0. Replace them with / global */ comments or define globals in your config file. See https://eslint.org/docs/latest/use/configure/migration-guide#eslint-env-configuration-comments for details. Found in /tmp/letscube-codeql-fixture-security/server/usernamePostgresBackfill.test.js at line 2.
letscube-server:lint: Done in 0.78s.

Tasks: 3 successful, 3 total
Cached: 3 cached, 3 total
Time: 13ms >>> FULL TURBO

Done in 0.07s. and yarn run v1.22.22
$ turbo run test:ci

• Packages in scope: letscube-client, letscube-scrambles, letscube-server
• Running test:ci in 3 packages
• Remote caching disabled, using shared worktree cache

letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-scrambles:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-server:test:ci: letscube-client:test:ci: letscube-scrambles:test:ci: letscube-client:test:ci: letscube-scrambles:test:ci: letscube-client:test:ci: letscube-scrambles:test:ci: letscube-client:test:ci: letscube-server:test:ci: letscube-scrambles:test:ci: letscube-client:test:ci: letscube-server:test:ci: letscube-scrambles:test:ci: letscube-server:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-server:test:ci: letscube-scrambles:test:ci: letscube-server:test:ci: letscube-scrambles:test:ci: letscube-server:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: 8 |
letscube-client:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-scrambles:test:ci: letscube-scrambles:test:ci: Tests: letscube-scrambles:test:ci: letscube-client:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-scrambles:test:ci: Time: letscube-scrambles:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-scrambles:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci: letscube-server:test:ci:
letscube-server:test:ci: letscube-server:test:ci: Tests: letscube-server:test:ci: Snapshots: letscube-server:test:ci: Time: letscube-server:test:ci: letscube-server:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: 9 |
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: 14 |
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: 16 |
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: 14 |
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: 16 |
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: 66 |
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: 69 |
letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: 15 |
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci: letscube-client:test:ci:
letscube-client:test:ci:
letscube-client:test:ci: letscube-client:test:ci: Tests: letscube-client:test:ci: Snapshots: letscube-client:test:ci: Time: letscube-client:test:ci: letscube-client:test:ci: Done in 5.08s. cache hit, replaying logs d98a4f5d76a5613c
yarn run v1.22.22
$ jest --ci --passWithNoTests
PASS src/lib/stats.test.js
PASS src/lib/utils.test.js
PASS src/store/room/reducer.test.js
PASS src/lib/requestSequence.test.js
PASS src/lib/wcaAuth.test.js
PASS src/lib/fetch.test.js
PASS src/components/Notifications/registry.test.js
PASS src/store/notifications/reducer.test.js
PASS src/store/room/roomPasswordStorage.test.js
PASS src/components/common/Scramble.test.jsx
● Console
console.error
cache hit, replaying logs 8a659104007abce5
Warning: Scramble: Support for defaultProps will be removed from function components in a future major release. Use JavaScript default parameters instead.
at event (/tmp/letscube-codeql-fixture-security/client/src/components/common/Scramble.jsx:43:3)
at DefaultPropsProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/DefaultPropsProvider/DefaultPropsProvider.js:17:3)
cache hit, replaying logs 2c1da7747f45717e
at RtlProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/RtlProvider/index.js:15:3)
yarn run v1.22.22
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/private-theming/node/ThemeProvider/ThemeProvider.js:40:5)
$ yarn test
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/ThemeProvider/ThemeProvider.js:56:5)
$ jest --passWithNoTests
at ThemeProviderNoVars (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/styles/ThemeProviderNoVars.js:15:10)
yarn run v1.22.22
PASS ./index.test.js
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/styles/ThemeProvider.js:16:3)
$ yarn test
generateScramble
$ jest --passWithNoTests
✓ uses cubing.js for 222 (11 ms)
✓ uses cubing.js for 333 (1 ms)
✓ uses cubing.js for 333bf (5 ms)
PASS postgres/dualWrite.test.js
✓ uses cubing.js for 333oh (1 ms)
PASS ./username.test.js
✓ uses cubing.js for 333ft (6 ms)
PASS socket/lib/roomAuthorization.test.js
✓ uses cubing.js for 444 (1 ms)
✓ uses cubing.js for 444bf (1 ms)
✓ uses cubing.js for 555 (6 ms)
7 | const theme = createTheme();
> 9 | const renderScramble = (props) => render(
PASS socket/lib/roomMap.test.js
PASS ./usernamePostgresBackfill.test.js
PASS socket/lib/reconnectGrace.test.js
PASS ./health.test.js
✓ uses cubing.js for 555bf (1 ms)
✓ uses cubing.js for 666 (8 ms)
✓ uses cubing.js for 777 (1 ms)
✓ uses cubing.js for minx (17 ms)
✓ uses cubing.js for pyram (1 ms)
| ^
10 |
11 | <Scramble {...props} />
12 | ,
PASS privacy/userEmailPurge.test.js
PASS social/requestRateLimiter.test.js
PASS ./usernameBackfill.test.js
✓ uses cubing.js for clock (11 ms)
✓ uses cubing.js for skewb (1 ms)
✓ uses cubing.js for sq1 (1 ms)
at printWarning (../node_modules/react-dom/cjs/react-dom.development.js:86:30)
at error (../node_modules/react-dom/cjs/react-dom.development.js:60:7)
at validateFunctionComponentInDev (../node_modules/react-dom/cjs/react-dom.development.js:20230:9)
PASS social/discoveryService.test.js
PASS socket/namespaces/default.test.js
PASS socket/lib/resultSubmission.test.js
PASS ./runtimeConfig.test.js
✓ uses cubing.js for fto (18 ms)
✓ uses Scrambow for the custom practice events (7 ms)
✓ rejects events that are not in the shared catalog (35 ms)
✓ surfaces cubing.js failures without using Scrambow (1 ms)
at mountIndeterminateComponent (../node_modules/react-dom/cjs/react-dom.development.js:20189:7)
at beginWork (../node_modules/react-dom/cjs/react-dom.development.js:21626:16)
PASS socket/lib/socketHandler.test.js
PASS realtime/socialEvents.test.js
PASS socket/middlewares/logger.test.js
PASS ./database.test.js
events
✓ contains every event supported by the generator (8 ms)
✓ does not expose provider implementation details (23 ms)
at beginWork$1 (../node_modules/react-dom/cjs/react-dom.development.js:27465:14)
at performUnitOfWork (../node_modules/react-dom/cjs/react-dom.development.js:26599:12)
at workLoopSync (../node_modules/react-dom/cjs/react-dom.development.js:26505:5)
at renderRootSync (../node_modules/react-dom/cjs/react-dom.development.js:26473:7)
PASS ./metrics.test.js
PASS ./features.test.js
PASS auth/testUser.test.js
Test Suites: 1 passed, 1 total
22 passed, 22 total
Snapshots: 0 total
at performConcurrentWorkOnRoot (../node_modules/react-dom/cjs/react-dom.development.js:25777:74)
PASS auth/wcaProfile.test.js
PASS socket/lib/roomSockets.test.js
PASS social/raceInvitationService.test.js
PASS socket/middlewares/wrapExpressMiddleware.test.js
1.545 s
Ran all test suites.
PASS ./requestLogging.test.js
PASS socket/lib/roomAvailability.test.js
PASS models/room.test.js
PASS social/relationshipService.test.js
Done in 2.46s.
PASS middlewares/apiRateLimit.test.js
PASS middlewares/csrf.test.js
PASS socket/namespaces/rooms.test.js
PASS models/user.test.js
PASS social/notificationService.test.js
PASS models/friendRelationship.test.js
PASS ./api.test.js
PASS auth/index.test.js
PASS api/friends.test.js
Test Suites: 38 passed, 38 total
205 passed, 205 total
0 total
3.94 s
Ran all test suites.
Done in 4.41s.
at flushActQueue (../node_modules/react/cjs/react.development.js:2667:24)
at act (../node_modules/react/cjs/react.development.js:2582:11)
at ../node_modules/@testing-library/react/dist/act-compat.js:46:25
at renderRoot (../node_modules/@testing-library/react/dist/pure.js:189:26)
at render (../node_modules/@testing-library/react/dist/pure.js:291:10)
at renderScramble (src/components/common/Scramble.test.jsx:9:41)
at Object.renderScramble (src/components/common/Scramble.test.jsx:16:3)
PASS src/components/Timer/ManualTimer.test.jsx
PASS src/components/User.test.jsx
● Console
console.error
Warning: User: Support for defaultProps will be removed from function components in a future major release. Use JavaScript default parameters instead.
at user (/tmp/letscube-codeql-fixture-security/client/src/components/User.jsx:34:17)
at Router (/tmp/letscube-codeql-fixture-security/node_modules/react-router/cjs/react-router.js:283:30)
at MemoryRouter (/tmp/letscube-codeql-fixture-security/node_modules/react-router/cjs/react-router.js:385:35)
at DefaultPropsProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/DefaultPropsProvider/DefaultPropsProvider.js:17:3)
at RtlProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/RtlProvider/index.js:15:3)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/private-theming/node/ThemeProvider/ThemeProvider.js:40:5)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/ThemeProvider/ThemeProvider.js:56:5)
at ThemeProviderNoVars (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/styles/ThemeProviderNoVars.js:15:10)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/styles/ThemeProvider.js:16:3)
at StyledEngineProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/styled-engine/node/StyledEngineProvider/StyledEngineProvider.js:106:5)
at children (/tmp/letscube-codeql-fixture-security/client/src/theme.jsx:77:33)
8 | const baseUser = { displayName: 'Cuber', id: 42 };
> 10 | const renderUser = (user) => render(
| ^
11 |
12 |
13 |
at printWarning (../node_modules/react-dom/cjs/react-dom.development.js:86:30)
at error (../node_modules/react-dom/cjs/react-dom.development.js:60:7)
at validateFunctionComponentInDev (../node_modules/react-dom/cjs/react-dom.development.js:20230:9)
at mountIndeterminateComponent (../node_modules/react-dom/cjs/react-dom.development.js:20189:7)
at beginWork (../node_modules/react-dom/cjs/react-dom.development.js:21626:16)
at beginWork$1 (../node_modules/react-dom/cjs/react-dom.development.js:27465:14)
at performUnitOfWork (../node_modules/react-dom/cjs/react-dom.development.js:26599:12)
at workLoopSync (../node_modules/react-dom/cjs/react-dom.development.js:26505:5)
at renderRootSync (../node_modules/react-dom/cjs/react-dom.development.js:26473:7)
at performConcurrentWorkOnRoot (../node_modules/react-dom/cjs/react-dom.development.js:25777:74)
at flushActQueue (../node_modules/react/cjs/react.development.js:2667:24)
at act (../node_modules/react/cjs/react.development.js:2582:11)
at ../node_modules/@testing-library/react/dist/act-compat.js:46:25
at renderRoot (../node_modules/@testing-library/react/dist/pure.js:189:26)
at render (../node_modules/@testing-library/react/dist/pure.js:291:10)
at renderUser (src/components/User.test.jsx:10:38)
at Object.renderUser (src/components/User.test.jsx:19:5)
PASS src/components/Lobby/Announcements.test.jsx
● Console
console.error
Warning: ReactMarkdown: Support for defaultProps will be removed from function components in a future major release. Use JavaScript default parameters instead.
at ReactMarkdown (/tmp/letscube-codeql-fixture-security/node_modules/react-markdown/src/react-markdown.js:81:42)
at div
at /tmp/letscube-codeql-fixture-security/node_modules/@emotion/react/dist/emotion-element-25f9958c.browser.cjs.js:56:23
at Paper (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/Paper/Paper.js:75:59)
at useState (/tmp/letscube-codeql-fixture-security/client/src/components/Lobby/Announcements.jsx:16:51)
at printWarning (../node_modules/react-dom/cjs/react-dom.development.js:86:30)
at error (../node_modules/react-dom/cjs/react-dom.development.js:60:7)
at validateFunctionComponentInDev (../node_modules/react-dom/cjs/react-dom.development.js:20230:9)
at mountIndeterminateComponent (../node_modules/react-dom/cjs/react-dom.development.js:20189:7)
at beginWork (../node_modules/react-dom/cjs/react-dom.development.js:21626:16)
at beginWork$1 (../node_modules/react-dom/cjs/react-dom.development.js:27465:14)
at performUnitOfWork (../node_modules/react-dom/cjs/react-dom.development.js:26599:12)
at workLoopSync (../node_modules/react-dom/cjs/react-dom.development.js:26505:5)
at renderRootSync (../node_modules/react-dom/cjs/react-dom.development.js:26473:7)
at performConcurrentWorkOnRoot (../node_modules/react-dom/cjs/react-dom.development.js:25777:74)
at workLoop (../node_modules/scheduler/cjs/scheduler.development.js:266:34)
at flushWork (../node_modules/scheduler/cjs/scheduler.development.js:239:14)
at performWorkUntilDeadline (../node_modules/scheduler/cjs/scheduler.development.js:533:21)
at Timeout.task [as _onTimeout] (../node_modules/jsdom/lib/jsdom/browser/Window.js:579:19)
PASS src/store/room/resultOutbox.test.js
PASS src/components/common/ScramblePreview.test.jsx
● Console
console.error
Warning: ScramblePreview: Support for defaultProps will be removed from function components in a future major release. Use JavaScript default parameters instead.
at event (/tmp/letscube-codeql-fixture-security/client/src/components/common/ScramblePreview.jsx:103:28)
at DefaultPropsProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/DefaultPropsProvider/DefaultPropsProvider.js:17:3)
at RtlProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/RtlProvider/index.js:15:3)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/private-theming/node/ThemeProvider/ThemeProvider.js:40:5)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/ThemeProvider/ThemeProvider.js:56:5)
at ThemeProviderNoVars (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/styles/ThemeProviderNoVars.js:15:10)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/styles/ThemeProvider.js:16:3)
at StyledEngineProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/styled-engine/node/StyledEngineProvider/StyledEngineProvider.js:106:5)
at children (/tmp/letscube-codeql-fixture-security/client/src/theme.jsx:77:33)
13 | const players = [];
> 15 | const renderPreview = (element) => render({element});
| ^
17 | const flushPlayerLoad = () => act(async () => {
18 | await Promise.resolve();
at printWarning (../node_modules/react-dom/cjs/react-dom.development.js:86:30)
at error (../node_modules/react-dom/cjs/react-dom.development.js:60:7)
at validateFunctionComponentInDev (../node_modules/react-dom/cjs/react-dom.development.js:20230:9)
at mountIndeterminateComponent (../node_modules/react-dom/cjs/react-dom.development.js:20189:7)
at beginWork (../node_modules/react-dom/cjs/react-dom.development.js:21626:16)
at beginWork$1 (../node_modules/react-dom/cjs/react-dom.development.js:27465:14)
at performUnitOfWork (../node_modules/react-dom/cjs/react-dom.development.js:26599:12)
at workLoopSync (../node_modules/react-dom/cjs/react-dom.development.js:26505:5)
at renderRootSync (../node_modules/react-dom/cjs/react-dom.development.js:26473:7)
at performConcurrentWorkOnRoot (../node_modules/react-dom/cjs/react-dom.development.js:25777:74)
at flushActQueue (../node_modules/react/cjs/react.development.js:2667:24)
at act (../node_modules/react/cjs/react.development.js:2582:11)
at ../node_modules/@testing-library/react/dist/act-compat.js:46:25
at renderRoot (../node_modules/@testing-library/react/dist/pure.js:189:26)
at render (../node_modules/@testing-library/react/dist/pure.js:291:10)
at renderPreview (src/components/common/ScramblePreview.test.jsx:15:42)
at Object.renderPreview (src/components/common/ScramblePreview.test.jsx:43:25)
console.error
Warning: TwistyVisualization: Support for defaultProps will be removed from function components in a future major release. Use JavaScript default parameters instead.
at event (/tmp/letscube-codeql-fixture-security/client/src/components/common/ScramblePreview.jsx:33:32)
at div
at event (/tmp/letscube-codeql-fixture-security/client/src/components/common/ScramblePreview.jsx:103:28)
at DefaultPropsProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/DefaultPropsProvider/DefaultPropsProvider.js:17:3)
at RtlProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/RtlProvider/index.js:15:3)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/private-theming/node/ThemeProvider/ThemeProvider.js:40:5)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/ThemeProvider/ThemeProvider.js:56:5)
at ThemeProviderNoVars (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/styles/ThemeProviderNoVars.js:15:10)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/styles/ThemeProvider.js:16:3)
at StyledEngineProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/styled-engine/node/StyledEngineProvider/StyledEngineProvider.js:106:5)
at children (/tmp/letscube-codeql-fixture-security/client/src/theme.jsx:77:33)
13 | const players = [];
> 15 | const renderPreview = (element) => render({element});
| ^
17 | const flushPlayerLoad = () => act(async () => {
18 | await Promise.resolve();
at printWarning (../node_modules/react-dom/cjs/react-dom.development.js:86:30)
at error (../node_modules/react-dom/cjs/react-dom.development.js:60:7)
at validateFunctionComponentInDev (../node_modules/react-dom/cjs/react-dom.development.js:20230:9)
at mountIndeterminateComponent (../node_modules/react-dom/cjs/react-dom.development.js:20189:7)
at beginWork (../node_modules/react-dom/cjs/react-dom.development.js:21626:16)
at beginWork$1 (../node_modules/react-dom/cjs/react-dom.development.js:27465:14)
at performUnitOfWork (../node_modules/react-dom/cjs/react-dom.development.js:26599:12)
at workLoopSync (../node_modules/react-dom/cjs/react-dom.development.js:26505:5)
at renderRootSync (../node_modules/react-dom/cjs/react-dom.development.js:26473:7)
at performConcurrentWorkOnRoot (../node_modules/react-dom/cjs/react-dom.development.js:25777:74)
at flushActQueue (../node_modules/react/cjs/react.development.js:2667:24)
at act (../node_modules/react/cjs/react.development.js:2582:11)
at ../node_modules/@testing-library/react/dist/act-compat.js:46:25
at renderRoot (../node_modules/@testing-library/react/dist/pure.js:189:26)
at render (../node_modules/@testing-library/react/dist/pure.js:291:10)
at renderPreview (src/components/common/ScramblePreview.test.jsx:15:42)
at Object.renderPreview (src/components/common/ScramblePreview.test.jsx:43:25)
console.error
Warning: Scramble: Support for defaultProps will be removed from function components in a future major release. Use JavaScript default parameters instead.
at event (/tmp/letscube-codeql-fixture-security/client/src/components/common/Scramble.jsx:43:3)
at div
at /tmp/letscube-codeql-fixture-security/node_modules/@emotion/react/dist/emotion-element-25f9958c.browser.cjs.js:56:23
at DialogContent (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/DialogContent/DialogContent.js:68:59)
at div
at /tmp/letscube-codeql-fixture-security/node_modules/@emotion/react/dist/emotion-element-25f9958c.browser.cjs.js:56:23
at Paper (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/Paper/Paper.js:75:59)
at /tmp/letscube-codeql-fixture-security/node_modules/@emotion/react/dist/emotion-element-25f9958c.browser.cjs.js:56:23
at div
at /tmp/letscube-codeql-fixture-security/node_modules/@emotion/react/dist/emotion-element-25f9958c.browser.cjs.js:56:23
at Transition (/tmp/letscube-codeql-fixture-security/node_modules/react-transition-group/cjs/Transition.js:135:30)
at Fade (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/Fade/Fade.js:33:42)
at FocusTrap (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/Unstable_TrapFocus/FocusTrap.js:85:5)
at div
at /tmp/letscube-codeql-fixture-security/node_modules/@emotion/react/dist/emotion-element-25f9958c.browser.cjs.js:56:23
at Portal (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/Portal/Portal.js:32:5)
at Modal (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/Modal/Modal.js:89:59)
at /tmp/letscube-codeql-fixture-security/node_modules/@emotion/react/dist/emotion-element-25f9958c.browser.cjs.js:56:23
at Dialog (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/Dialog/Dialog.js:201:59)
at event (/tmp/letscube-codeql-fixture-security/client/src/components/common/ScramblePreview.jsx:103:28)
at DefaultPropsProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/DefaultPropsProvider/DefaultPropsProvider.js:17:3)
at RtlProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/RtlProvider/index.js:15:3)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/private-theming/node/ThemeProvider/ThemeProvider.js:40:5)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/ThemeProvider/ThemeProvider.js:56:5)
at ThemeProviderNoVars (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/styles/ThemeProviderNoVars.js:15:10)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/styles/ThemeProvider.js:16:3)
at StyledEngineProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/styled-engine/node/StyledEngineProvider/StyledEngineProvider.js:106:5)
at children (/tmp/letscube-codeql-fixture-security/client/src/theme.jsx:77:33)
65 | await flushPlayerLoad();
> 67 | fireEvent.click(getByLabelText('Enlarge 777 scramble preview'));
| ^
68 | await flushPlayerLoad();
70 | expect(getByLabelText('777 enlarged scramble preview')).toBeInTheDocument();
at printWarning (../node_modules/react-dom/cjs/react-dom.development.js:86:30)
at error (../node_modules/react-dom/cjs/react-dom.development.js:60:7)
at validateFunctionComponentInDev (../node_modules/react-dom/cjs/react-dom.development.js:20230:9)
at mountIndeterminateComponent (../node_modules/react-dom/cjs/react-dom.development.js:20189:7)
at beginWork (../node_modules/react-dom/cjs/react-dom.development.js:21626:16)
at beginWork$1 (../node_modules/react-dom/cjs/react-dom.development.js:27465:14)
at performUnitOfWork (../node_modules/react-dom/cjs/react-dom.development.js:26599:12)
at workLoopSync (../node_modules/react-dom/cjs/react-dom.development.js:26505:5)
at renderRootSync (../node_modules/react-dom/cjs/react-dom.development.js:26473:7)
at performSyncWorkOnRoot (../node_modules/react-dom/cjs/react-dom.development.js:26124:20)
at flushSyncCallbacks (../node_modules/react-dom/cjs/react-dom.development.js:12042:22)
at flushActQueue (../node_modules/react/cjs/react.development.js:2667:24)
at act (../node_modules/react/cjs/react.development.js:2582:11)
at ../node_modules/@testing-library/react/dist/act-compat.js:46:25
at Object.eventWrapper (../node_modules/@testing-library/react/dist/pure.js:106:28)
at fireEvent (../node_modules/@testing-library/dom/dist/events.js:12:35)
at Function.fireEvent. [as click] (../node_modules/@testing-library/dom/dist/events.js:110:36)
at Function.fireEvent. [as click] (../node_modules/@testing-library/react/dist/fire-event.js:15:52)
at Object.click (src/components/common/ScramblePreview.test.jsx:67:13)
PASS src/store/middlewares/rooms.test.js
PASS src/components/Room/Common/Main.test.jsx
PASS src/components/App.test.jsx
PASS src/components/Navigation.test.jsx
● Console
console.error
Warning: GlobalPendingResultAlert: Support for defaultProps will be removed from function components in a future major release. Use JavaScript default parameters instead.
at atPendingRoom (/tmp/letscube-codeql-fixture-security/client/src/components/Navigation.jsx:42:3)
38 | it('keeps discard accessible when the pending room could not be joined', () => {
39 | const onDiscard = jest.fn();
> 40 | render(
| ^
41 | <GlobalPendingResultAlert
42 | atPendingRoom
43 | onDiscard={onDiscard}
at printWarning (../node_modules/react-dom/cjs/react-dom.development.js:86:30)
at error (../node_modules/react-dom/cjs/react-dom.development.js:60:7)
at validateFunctionComponentInDev (../node_modules/react-dom/cjs/react-dom.development.js:20230:9)
at mountIndeterminateComponent (../node_modules/react-dom/cjs/react-dom.development.js:20189:7)
at beginWork (../node_modules/react-dom/cjs/react-dom.development.js:21626:16)
at beginWork$1 (../node_modules/react-dom/cjs/react-dom.development.js:27465:14)
at performUnitOfWork (../node_modules/react-dom/cjs/react-dom.development.js:26599:12)
at workLoopSync (../node_modules/react-dom/cjs/react-dom.development.js:26505:5)
at renderRootSync (../node_modules/react-dom/cjs/react-dom.development.js:26473:7)
at performConcurrentWorkOnRoot (../node_modules/react-dom/cjs/react-dom.development.js:25777:74)
at flushActQueue (../node_modules/react/cjs/react.development.js:2667:24)
at act (../node_modules/react/cjs/react.development.js:2582:11)
at ../node_modules/@testing-library/react/dist/act-compat.js:46:25
at renderRoot (../node_modules/@testing-library/react/dist/pure.js:189:26)
at render (../node_modules/@testing-library/react/dist/pure.js:291:10)
at Object. (src/components/Navigation.test.jsx:40:11)
PASS src/components/RoomConfigureDialog.test.jsx
● Console
console.error
Warning: RoomConfigureDialog: Support for defaultProps will be removed from function components in a future major release. Use JavaScript default parameters instead.
at room (/tmp/letscube-codeql-fixture-security/client/src/components/RoomConfigureDialog.jsx:45:3)
at DefaultPropsProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/DefaultPropsProvider/DefaultPropsProvider.js:17:3)
at RtlProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/RtlProvider/index.js:15:3)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/private-theming/node/ThemeProvider/ThemeProvider.js:40:5)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/system/ThemeProvider/ThemeProvider.js:56:5)
at ThemeProviderNoVars (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/styles/ThemeProviderNoVars.js:15:10)
at ThemeProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/material/node/styles/ThemeProvider.js:16:3)
at StyledEngineProvider (/tmp/letscube-codeql-fixture-security/node_modules/@mui/styled-engine/node/StyledEngineProvider/StyledEngineProvider.js:106:5)
at children (/tmp/letscube-codeql-fixture-security/client/src/theme.jsx:77:33)
14 | };
> 16 | const renderDialog = (props) => render(
| ^
17 |
18 | <RoomConfigureDialog {...props} />
19 | ,
at printWarning (../node_modules/react-dom/cjs/react-dom.development.js:86:30)
at error (../node_modules/react-dom/cjs/react-dom.development.js:60:7)
at validateFunctionComponentInDev (../node_modules/react-dom/cjs/react-dom.development.js:20230:9)
at mountIndeterminateComponent (../node_modules/react-dom/cjs/react-dom.development.js:20189:7)
at beginWork (../node_modules/react-dom/cjs/react-dom.development.js:21626:16)
at beginWork$1 (../node_modules/react-dom/cjs/react-dom.development.js:27465:14)
at performUnitOfWork (../node_modules/react-dom/cjs/react-dom.development.js:26599:12)
at workLoopSync (../node_modules/react-dom/cjs/react-dom.development.js:26505:5)
at renderRootSync (../node_modules/react-dom/cjs/react-dom.development.js:26473:7)
at performConcurrentWorkOnRoot (../node_modules/react-dom/cjs/react-dom.development.js:25777:74)
at flushActQueue (../node_modules/react/cjs/react.development.js:2667:24)
at act (../node_modules/react/cjs/react.development.js:2582:11)
at ../node_modules/@testing-library/react/dist/act-compat.js:46:25
at renderRoot (../node_modules/@testing-library/react/dist/pure.js:189:26)
at render (../node_modules/@testing-library/react/dist/pure.js:291:10)
at renderDialog (src/components/RoomConfigureDialog.test.jsx:16:39)
at Object.renderDialog (src/components/RoomConfigureDialog.test.jsx:25:5)
Test Suites: 20 passed, 20 total
97 passed, 97 total
0 total
4.748 s
Ran all test suites.

Tasks: 3 successful, 3 total
Cached: 3 cached, 3 total
Time: 14ms >>> FULL TURBO

Done in 0.07s.

Exercise the friends authorization fixture behind the production API rate limiter and model CSRF sessions as secure proxy-served cookies so CodeQL evaluates the tests against the same security controls.

Harden security test fixtures

f268adb

Exercise the friends authorization fixture behind the production API rate limiter and model CSRF sessions as secure proxy-served cookies so CodeQL evaluates the tests against the same security controls.

coder13 marked this pull request as ready for review July 14, 2026 02:29

coder13 merged commit 4cf2e8e into master Jul 14, 2026
9 checks passed

coder13 deleted the agent/codeql-fixture-security branch July 14, 2026 02:29

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Harden security test fixtures#229

Harden security test fixtures#229
coder13 merged 1 commit into
masterfrom
agent/codeql-fixture-security

coder13 commented Jul 14, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

coder13 commented Jul 14, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant