comunica / traqula / 27265892727

100%

main: 100%

push

github

test: add regression tests for prototype-key prefix bypass

Tests that fail on main (before the fix) and pass on this branch:

Parser (engines/parser-sparql-1-1/test/extraCoverage.test.ts):
- Prefixes named 'constructor', 'toString', 'hasOwnProperty', 'valueOf'
  must be rejected with 'Unknown prefix' when undeclared. On main these
  slip through because `{}`['constructor'] resolves via the prototype
  chain and is not `undefined`.
- A declared prefix with a prototype-key name must be accepted (positive case).

Algebra (engines/algebra-sparql-1-1/test/extraCoverage.test.ts):
- toAlgebra must throw 'Unknown prefix: constructor' when the prefix is
  undeclared, not silently produce a garbage IRI by coercing the Object
  constructor function to a string.
- A prototype-key prefix declared in the query string expands correctly.
- A prototype-key prefix passed via the config object expands correctly.

Note: '__proto__' is not a valid SPARQL PN_PREFIX token (starts with '_')
so the lexer already rejects it; no separate test needed.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

758 of 758 branches covered (100.0%)

Branch coverage included in aggregate %.

5467 of 5467 relevant lines covered (100.0%)

283092.85 hits per line