chore: initialize from frontend template 4dc033c

tests/fixtures/security/allowed/safe-text-expression.tsx

@@ -0,0 +1,3 @@
+export function Fixture({ value }: { value: string }) {
+  return <span>{value}</span>;
+}

tests/fixtures/security/allowed/safe-text.tsx

@@ -0,0 +1,3 @@
+export function SafeTextFixture({ value }: Readonly<{ value: string }>) {
+  return <p>{value}</p>;
+}

tests/fixtures/security/forbidden/dynamic-script.ts

@@ -0,0 +1,5 @@
+export function attachScript(source: string) {
+  const script = document.createElement("script");
+  script.src = source;
+  document.head.append(script);
+}

tests/fixtures/security/forbidden/eval.ts

@@ -0,0 +1 @@
+export const execute = (source: string) => eval(source);

tests/fixtures/security/forbidden/raw-html-expression.tsx

@@ -0,0 +1,3 @@
+export function RawHtml({ value }: { value: string }) {
+  return <div dangerouslySetInnerHTML={{ __html: value }} />;
+}

tests/fixtures/security/forbidden/raw-html.tsx

@@ -0,0 +1,3 @@
+export function UnsafeHtmlFixture({ value }: Readonly<{ value: string }>) {
+  return <div dangerouslySetInnerHTML={{ __html: value }} />;
+}

tests/fixtures/security/secret-detection/allowed/test-credentials.ts

@@ -0,0 +1 @@
+export const client_secret = "fixture-only-secret-value";

tests/fixtures/security/secret-detection/forbidden-policy.json

@@ -0,0 +1,12 @@
+{
+  "schemaVersion": 1,
+  "trackedRoots": [
+    "tests/fixtures/security/secret-detection/forbidden"
+  ],
+  "generatedRoots": [],
+  "includedPaths": [
+    "tests/fixtures/security/secret-detection/forbidden"
+  ],
+  "excludedPaths": [],
+  "allowlist": []
+}

tests/fixtures/security/secret-detection/forbidden/config.json

@@ -0,0 +1,3 @@
+{
+  "client_secret": "synthetic-forbidden-secret"
+}

tests/fixtures/security/secret-detection/forbidden/dist.ts

@@ -0,0 +1,2 @@
+(globalThis as typeof globalThis & { password: string }).password =
+  "synthetic-built-secret";

tests/fixtures/security/secret-detection/forbidden/source.ts

@@ -0,0 +1 @@
+export const leaked = "AKIAABCDEFGHIJKLMNOP";

tests/fixtures/security/secret-detection/nonmatching-policy.json

@@ -0,0 +1,12 @@
+{
+  "schemaVersion": 1,
+  "trackedRoots": [
+    "tests/fixtures/security/secret-detection/forbidden"
+  ],
+  "generatedRoots": [],
+  "includedPaths": [
+    "tests/fixtures/security/secret-detection/misspelled"
+  ],
+  "excludedPaths": [],
+  "allowlist": []
+}