Skip to content

fix(sec): enforce base32 charset regex on isValidTaskId with regression tests (#176) - #180

Open
jihadMo wants to merge 1 commit into
devasignhq:mainfrom
jihadMo:fix/sec-taskid-base32-validation
Open

fix(sec): enforce base32 charset regex on isValidTaskId with regression tests (#176)#180
jihadMo wants to merge 1 commit into
devasignhq:mainfrom
jihadMo:fix/sec-taskid-base32-validation

fix(sec): enforce base32 charset regex on isValidTaskId with regressi…

d9b5ea0
Select commit
Loading
Failed to load commit list.
DevAsign-App / DevAsign · End goal succeeded Aug 7, 2026

Acceptance criteria met

All acceptance criteria are satisfied. isValidTaskId now enforces the RFC 4648 base32 character set [A-Z2-7] and exact length of 25 using /^[A-Z2-7]{25}$/, and regression tests verify rejection of non-base32 characters and acceptance of valid derived task IDs. One warning suggestion is provided to restore tests for upper length boundary and determinism.