mimic-big

Files

knacky 90f8141cfc fix(backend): make google-re2 a hard dependency, drop re fallback (B1)

Code-review BLOCKER B1. Reaffirms D-011: a `re` stdlib fallback defeats the
OPSEC-safe-regex guarantee because hostile C2 output can trigger catastrophic
backtracking. The `[:1MB]` slice cap does not mitigate that — re-evaluating
a malicious pattern over 1 MB of attacker-controlled text is still a worker
freeze.

- `mimic.templating.filters` now imports `re2` unconditionally and raises
  `RuntimeError` at module load if the binding is absent. No `re` import,
  no `_HAS_RE2` branch, no `_FALLBACK_MAX_INPUT`.
- `pyproject.toml` already pinned `google-re2 >= 1.1, < 2.0`; this commit
  hardens the import path to actually enforce it.
- New test `test_re2_is_required` asserts the binding is wired in.

2026-05-22 05:23:47 +02:00

__init__.py

test(backend): add pytest baseline (B0.8)

2026-05-21 20:36:03 +02:00

test_audit_hash.py

test(backend): add pytest baseline (B0.8)

2026-05-21 20:36:03 +02:00

test_connector_factory.py

test(backend): add pytest baseline (B0.8)

2026-05-21 20:36:03 +02:00

test_password.py

test(backend): add pytest baseline (B0.8)