fast-json-stringify 1.20.2 → 1.21.0

package/index.js

@@ -383,6 +383,11 @@ function addPatternProperties (schema, externalSchema, fullSchema) {
     var type = pp[regex].type
     var format = pp[regex].format
     var stringSerializer = getStringSerializer(format)
+    try {
+      RegExp(regex)
+    } catch (err) {
+      throw new Error(`${err.message}. Found at ${regex} matching ${JSON.stringify(pp[regex])}`)
+    }
     code += `
         if (/${regex.replace(/\\*\//g, '\\/')}/.test(keys[i])) {
     `
@@ -425,7 +430,7 @@ function addPatternProperties (schema, externalSchema, fullSchema) {
       `
     } else {
       code += `
-        throw new Error('Cannot coerce ' + obj[keys[i]] + ' to ${type}')
+        throw new Error('Cannot coerce ' + obj[keys[i]] + ' to ' + ${JSON.stringify(type)})
       `
     }
 
@@ -518,7 +523,7 @@ function additionalProperty (schema, externalSchema, fullSchema) {
     `
   } else {
     code += `
-        throw new Error('Cannot coerce ' + obj[keys[i]] + ' to ${type}')
+        throw new Error('Cannot coerce ' + obj[keys[i]] + ' to ' + ${JSON.stringify(type)})
     `
   }
   return code
@@ -587,7 +592,7 @@ function refFinder (ref, schema, externalSchema) {
       return dereferenced
     } else {
       for (var i = 1; i < walk.length; i++) {
-        code += `['${sanitizeKey(walk[i])}']`
+        code += `[${JSON.stringify(walk[i])}]`
       }
     }
   }
@@ -603,35 +608,27 @@ function refFinder (ref, schema, externalSchema) {
 
   function findBadKey (obj, keys) {
     if (keys.length === 0) return null
-    const key = sanitizeKey(keys.shift())
+    const key = keys.shift()
     if (obj[key] === undefined) {
       stringSimilarity = stringSimilarity || require('string-similarity')
       const { bestMatch } = stringSimilarity.findBestMatch(key, Object.keys(obj))
       if (bestMatch.rating >= 0.5) {
-        throw new Error(`Cannot find reference '${key}', did you mean '${bestMatch.target}'?`)
+        throw new Error(`Cannot find reference ${JSON.stringify(key)}, did you mean ${JSON.stringify(bestMatch.target)}?`)
       } else {
-        throw new Error(`Cannot find reference '${key}'`)
+        throw new Error(`Cannot find reference ${JSON.stringify(key)}`)
       }
     }
     return findBadKey(obj[key], keys)
   }
 }
 
-function sanitizeKey (key) {
-  const rep = key.replace(/(\\*)'/g, function (match, p1) {
-    var base = ''
-    if (p1.length % 2 === 1) {
-      base = p1.slice(2)
-    } else {
-      base = p1
-    }
-    var rep = base + '\\\''
-    return rep
-  })
-  return rep
-}
-
 function buildCode (schema, code, laterCode, name, externalSchema, fullSchema) {
+  if (schema.$ref) {
+    schema = refFinder(schema.$ref, fullSchema, externalSchema)
+  }
+
+  var required = schema.required
+
   Object.keys(schema.properties || {}).forEach((key, i, a) => {
     if (schema.properties[key].$ref) {
       // if the schema object is deep in the tree, we must resolve the ref in the parent scope
@@ -644,14 +641,14 @@ function buildCode (schema, code, laterCode, name, externalSchema, fullSchema) {
 
     var type = schema.properties[key].type
     var nullable = schema.properties[key].nullable
-    var sanitized = sanitizeKey(key)
-    var asString = sanitizeKey($asString(key).replace(/\\/g, '\\\\'))
+    var sanitized = JSON.stringify(key)
+    var asString = JSON.stringify(sanitized)
 
     if (nullable) {
       code += `
-        if (obj['${sanitized}'] === null) {
+        if (obj[${sanitized}] === null) {
           ${addComma}
-          json += '${asString}:null'
+          json += ${asString} + ':null'
           var rendered = true
         } else {
       `
@@ -659,10 +656,10 @@ function buildCode (schema, code, laterCode, name, externalSchema, fullSchema) {
 
     if (type === 'number') {
       code += `
-          var t = Number(obj['${sanitized}'])
+          var t = Number(obj[${sanitized}])
           if (!isNaN(t)) {
             ${addComma}
-            json += '${asString}:' + t
+            json += ${asString} + ':' + t
       `
     } else if (type === 'integer') {
       code += `
@@ -670,25 +667,25 @@ function buildCode (schema, code, laterCode, name, externalSchema, fullSchema) {
       `
       if (isLong) {
         code += `
-            if (isLong(obj['${sanitized}'])) {
+            if (isLong(obj[${sanitized}])) {
               ${addComma}
-              json += '${asString}:' + obj['${sanitized}'].toString()
+              json += ${asString} + ':' + obj[${sanitized}].toString()
               rendered = true
             } else {
-              var t = Number(obj['${sanitized}'])
+              var t = Number(obj[${sanitized}])
               if (!isNaN(t)) {
                 ${addComma}
-                json += '${asString}:' + t
+                json += ${asString} + ':' + t
                 rendered = true
               }
             }
         `
       } else {
         code += `
-            var t = Number(obj['${sanitized}'])
+            var t = Number(obj[${sanitized}])
             if (!isNaN(t)) {
               ${addComma}
-              json += '${asString}:' + t
+              json += ${asString} + ':' + t
               rendered = true
             }
         `
@@ -698,24 +695,26 @@ function buildCode (schema, code, laterCode, name, externalSchema, fullSchema) {
       `
     } else {
       code += `
-        if (obj['${sanitized}'] !== undefined) {
+        if (obj[${sanitized}] !== undefined) {
           ${addComma}
-          json += '${asString}:'
+          json += ${asString} + ':'
         `
 
-      var result = nested(laterCode, name, key, schema.properties[key], externalSchema, fullSchema)
+      var result = nested(laterCode, name, key, schema.properties[key], externalSchema, fullSchema, undefined, false)
       code += result.code
       laterCode = result.laterCode
     }
 
     var defaultValue = schema.properties[key].default
     if (defaultValue !== undefined) {
+      required = filterRequired(schema.required, key)
       code += `
       } else {
         ${addComma}
-        json += '${asString}:${sanitizeKey(JSON.stringify(defaultValue).replace(/\\/g, '\\\\'))}'
+        json += ${asString} + ':' + ${JSON.stringify(JSON.stringify(defaultValue))}
       `
     } else if (schema.required && schema.required.indexOf(key) !== -1) {
+      required = filterRequired(schema.required, key)
       code += `
       } else {
         throw new Error('${sanitized} is required!')
@@ -732,9 +731,33 @@ function buildCode (schema, code, laterCode, name, externalSchema, fullSchema) {
       `
     }
   })
+
+  if (required && required.length > 0) {
+    code += 'var required = ['
+    for (var i = 0; i < required.length; i++) {
+      if (i > 0) {
+        code += ','
+      }
+      code += `${JSON.stringify(required[i])}`
+    }
+    code += ']'
+    code += `
+      for (var i = 0; i < required.length; i++) {
+        if (obj[required[i]] === undefined) throw new Error('"' + required[i] + '" is required!')
+      }
+    `
+  }
+
   return { code: code, laterCode: laterCode }
 }
 
+function filterRequired (required, key) {
+  if (!required) {
+    return required
+  }
+  return required.filter(k => k !== key)
+}
+
 function buildCodeWithAllOfs (schema, code, laterCode, name, externalSchema, fullSchema) {
   if (schema.allOf) {
     schema.allOf.forEach((ss) => {
@@ -890,7 +913,7 @@ function buildArray (schema, code, name, externalSchema, fullSchema) {
   if (Array.isArray(schema.items)) {
     result = schema.items.reduce((res, item, i) => {
       var accessor = '[i]'
-      const tmpRes = nested(laterCode, name, accessor, item, externalSchema, fullSchema, i)
+      const tmpRes = nested(laterCode, name, accessor, item, externalSchema, fullSchema, i, true)
       var condition = `i === ${i} && ${buildArrayTypeCondition(item.type, accessor)}`
       return {
         code: `${res.code}
@@ -907,7 +930,7 @@ function buildArray (schema, code, name, externalSchema, fullSchema) {
     }
     `
   } else {
-    result = nested(laterCode, name, '[i]', schema.items, externalSchema, fullSchema)
+    result = nested(laterCode, name, '[i]', schema.items, externalSchema, fullSchema, undefined, true)
   }
 
   code += `
@@ -981,7 +1004,21 @@ function dereferenceOfRefs (schema, externalSchema, fullSchema, type) {
   })
 }
 
-function nested (laterCode, name, key, schema, externalSchema, fullSchema, subKey) {
+var strNameCounter = 0
+function asFuncName (str) {
+  // only allow chars that can work
+  var rep = str.replace(/[^a-zA-Z0-9$_]/g, '')
+
+  if (rep.length === 0) {
+    return 'anan' + strNameCounter++
+  } else if (rep !== str) {
+    rep += strNameCounter++
+  }
+
+  return rep
+}
+
+function nested (laterCode, name, key, schema, externalSchema, fullSchema, subKey, isArray) {
   var code = ''
   var funcName
 
@@ -1001,7 +1038,8 @@ function nested (laterCode, name, key, schema, externalSchema, fullSchema, subKe
   var type = schema.type
   var nullable = schema.nullable === true
 
-  var accessor = key.indexOf('[') === 0 ? sanitizeKey(key) : `['${sanitizeKey(key)}']`
+  var accessor = isArray ? key : `[${JSON.stringify(key)}]`
+
   switch (type) {
     case 'null':
       code += `
@@ -1022,14 +1060,14 @@ function nested (laterCode, name, key, schema, externalSchema, fullSchema, subKe
       code += nullable ? `json += obj${accessor} === null ? null : $asBoolean(obj${accessor})` : `json += $asBoolean(obj${accessor})`
       break
     case 'object':
-      funcName = (name + key + subKey).replace(/[-.\[\] ]/g, '').replace(/[@]/g, 'AT_SYMBOL') // eslint-disable-line
+      funcName = asFuncName(name + key + subKey)
       laterCode = buildObject(schema, laterCode, funcName, externalSchema, fullSchema)
       code += `
         json += ${funcName}(obj${accessor})
       `
       break
     case 'array':
-      funcName = '$arr' + (name + key + subKey).replace(/[-.\[\] ]/g, '').replace(/[@]/g, 'AT_SYMBOL') // eslint-disable-line
+      funcName = asFuncName('$arr' + name + key + subKey) // eslint-disable-line
       laterCode = buildArray(schema, laterCode, funcName, externalSchema, fullSchema)
       code += `
         json += ${funcName}(obj${accessor})
@@ -1039,7 +1077,7 @@ function nested (laterCode, name, key, schema, externalSchema, fullSchema, subKe
       if ('anyOf' in schema) {
         dereferenceOfRefs(schema, externalSchema, fullSchema, 'anyOf')
         schema.anyOf.forEach((s, index) => {
-          var nestedResult = nested(laterCode, name, key, s, externalSchema, fullSchema, subKey !== '' ? subKey : 'i' + index)
+          var nestedResult = nested(laterCode, name, key, s, externalSchema, fullSchema, subKey !== '' ? subKey : 'i' + index, isArray)
           code += `
             ${index === 0 ? 'if' : 'else if'}(ajv.validate(${require('util').inspect(s, { depth: null })}, obj${accessor}))
               ${nestedResult.code}
@@ -1052,7 +1090,7 @@ function nested (laterCode, name, key, schema, externalSchema, fullSchema, subKe
       } else if ('oneOf' in schema) {
         dereferenceOfRefs(schema, externalSchema, fullSchema, 'oneOf')
         schema.oneOf.forEach((s, index) => {
-          var nestedResult = nested(laterCode, name, key, s, externalSchema, fullSchema, subKey !== '' ? subKey : 'i' + index)
+          var nestedResult = nested(laterCode, name, key, s, externalSchema, fullSchema, subKey !== '' ? subKey : 'i' + index, isArray)
           code += `
             ${index === 0 ? 'if' : 'else if'}(ajv.validate(${require('util').inspect(s, { depth: null })}, obj${accessor}))
               ${nestedResult.code}
@@ -1076,7 +1114,7 @@ function nested (laterCode, name, key, schema, externalSchema, fullSchema, subKe
         const sortedTypes = nullIndex !== -1 ? [type[nullIndex]].concat(type.slice(0, nullIndex)).concat(type.slice(nullIndex + 1)) : type
         sortedTypes.forEach((type, index) => {
           var tempSchema = Object.assign({}, schema, { type })
-          var nestedResult = nested(laterCode, name, key, tempSchema, externalSchema, fullSchema, subKey)
+          var nestedResult = nested(laterCode, name, key, tempSchema, externalSchema, fullSchema, subKey, isArray)
 
           if (type === 'string') {
             code += `

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fast-json-stringify",
-  "version": "1.20.2",
+  "version": "1.21.0",
   "description": "Stringify your JSON at max speed",
   "main": "index.js",
   "types": "index.d.ts",

package/test/allof.test.js

@@ -44,7 +44,7 @@ test('object with allOf and multiple schema on the allOf', (t) => {
       id: 1
     })
   } catch (e) {
-    t.is(e.message, 'name is required!')
+    t.is(e.message, '"name" is required!')
   }
 
   try {
@@ -52,7 +52,7 @@ test('object with allOf and multiple schema on the allOf', (t) => {
       name: 'string'
     })
   } catch (e) {
-    t.is(e.message, 'id is required!')
+    t.is(e.message, '"id" is required!')
   }
 
   try {
@@ -135,7 +135,7 @@ test('object with nested allOfs', (t) => {
     allOf: [
       {
         required: [
-          'id'
+          'id1'
         ],
         type: 'object',
         properties: {
@@ -184,3 +184,200 @@ test('object with nested allOfs', (t) => {
     t.fail()
   }
 })
+
+test('object with $ref in allOf', (t) => {
+  t.plan(1)
+
+  const schema = {
+    title: 'object with $ref in allOf',
+    type: 'object',
+    definitions: {
+      id1: {
+        type: 'object',
+        properties: {
+          id1: {
+            type: 'integer'
+          }
+        }
+      }
+    },
+    allOf: [
+      {
+        $ref: '#/definitions/id1'
+      }
+    ]
+  }
+
+  try {
+    const stringify = build(schema)
+    try {
+      const value = stringify({
+        id1: 1,
+        id2: 2 // extra prop shouldn't be in result
+      })
+      t.is(value, '{"id1":1}')
+    } catch (e) {
+      t.fail()
+    }
+  } catch (e) {
+    t.fail()
+  }
+})
+
+test('object with $ref and other object in allOf', (t) => {
+  t.plan(1)
+
+  const schema = {
+    title: 'object with $ref in allOf',
+    type: 'object',
+    definitions: {
+      id1: {
+        type: 'object',
+        properties: {
+          id1: {
+            type: 'integer'
+          }
+        }
+      }
+    },
+    allOf: [
+      {
+        $ref: '#/definitions/id1'
+      },
+      {
+        type: 'object',
+        properties: {
+          id2: {
+            type: 'integer'
+          }
+        }
+      }
+    ]
+  }
+
+  try {
+    const stringify = build(schema)
+    try {
+      const value = stringify({
+        id1: 1,
+        id2: 2,
+        id3: 3 // extra prop shouldn't be in result
+      })
+      t.is(value, '{"id1":1,"id2":2}')
+    } catch (e) {
+      t.fail()
+    }
+  } catch (e) {
+    t.fail()
+  }
+})
+
+test('object with multiple $refs in allOf', (t) => {
+  t.plan(1)
+
+  const schema = {
+    title: 'object with $ref in allOf',
+    type: 'object',
+    definitions: {
+      id1: {
+        type: 'object',
+        properties: {
+          id1: {
+            type: 'integer'
+          }
+        }
+      },
+      id2: {
+        type: 'object',
+        properties: {
+          id2: {
+            type: 'integer'
+          }
+        }
+      }
+    },
+    allOf: [
+      {
+        $ref: '#/definitions/id1'
+      },
+      {
+        $ref: '#/definitions/id2'
+      }
+    ]
+  }
+
+  try {
+    const stringify = build(schema)
+    try {
+      const value = stringify({
+        id1: 1,
+        id2: 2,
+        id3: 3 // extra prop shouldn't be in result
+      })
+      t.is(value, '{"id1":1,"id2":2}')
+    } catch (e) {
+      t.fail()
+    }
+  } catch (e) {
+    t.fail()
+  }
+})
+
+test('object with external $refs in allOf', (t) => {
+  t.plan(1)
+
+  const externalSchema = {
+    first: {
+      definitions: {
+        id1: {
+          type: 'object',
+          properties: {
+            id1: {
+              type: 'integer'
+            }
+          }
+        }
+      }
+    },
+    second: {
+      id2: {
+        $id: '#id2',
+        type: 'object',
+        properties: {
+          id2: {
+            type: 'integer'
+          }
+        }
+      }
+    }
+  }
+
+  const schema = {
+    title: 'object with $ref in allOf',
+    type: 'object',
+    allOf: [
+      {
+        $ref: 'first#/definitions/id1'
+      },
+      {
+        $ref: 'second#id2'
+      }
+    ]
+  }
+
+  try {
+    const stringify = build(schema, { schema: externalSchema })
+    try {
+      const value = stringify({
+        id1: 1,
+        id2: 2,
+        id3: 3 // extra prop shouldn't be in result
+      })
+      t.is(value, '{"id1":1,"id2":2}')
+    } catch (e) {
+      t.fail()
+    }
+  } catch (e) {
+    t.fail()
+  }
+})

package/test/ref.test.js

@@ -820,7 +820,7 @@ test('ref external to relative definition', (t) => {
 
   const schema = {
     type: 'object',
-    required: ['foo'],
+    required: ['fooParent'],
     properties: {
       fooParent: { $ref: 'relative:to:local' }
     }
@@ -934,7 +934,7 @@ test('Bad key', t => {
       })
       t.fail('Should throw')
     } catch (err) {
-      t.is(err.message, "Cannot find reference 'porjectId', did you mean 'projectId'?")
+      t.is(err.message, 'Cannot find reference "porjectId", did you mean "projectId"?')
     }
   })
 
@@ -959,7 +959,7 @@ test('Bad key', t => {
       })
       t.fail('Should throw')
     } catch (err) {
-      t.is(err.message, "Cannot find reference 'foobar'")
+      t.is(err.message, 'Cannot find reference "foobar"')
     }
   })
 
@@ -989,7 +989,7 @@ test('Bad key', t => {
       })
       t.fail('Should throw')
     } catch (err) {
-      t.is(err.message, "Cannot find reference 'porjectId', did you mean 'projectId'?")
+      t.is(err.message, 'Cannot find reference "porjectId", did you mean "projectId"?')
     }
   })
 
@@ -1019,7 +1019,7 @@ test('Bad key', t => {
       })
       t.fail('Should throw')
     } catch (err) {
-      t.is(err.message, "Cannot find reference 'foobar'")
+      t.is(err.message, 'Cannot find reference "foobar"')
     }
   })
 
@@ -1049,7 +1049,7 @@ test('Bad key', t => {
       })
       t.fail('Should throw')
     } catch (err) {
-      t.is(err.message, "Cannot find reference 'deifnitions', did you mean 'definitions'?")
+      t.is(err.message, 'Cannot find reference "deifnitions", did you mean "definitions"?')
     }
   })
 
@@ -1074,7 +1074,7 @@ test('Bad key', t => {
       })
       t.fail('Should throw')
     } catch (err) {
-      t.is(err.message, "Cannot find reference 'deifnitions', did you mean 'definitions'?")
+      t.is(err.message, 'Cannot find reference "deifnitions", did you mean "definitions"?')
     }
   })
 
@@ -1104,7 +1104,7 @@ test('Bad key', t => {
       })
       t.fail('Should throw')
     } catch (err) {
-      t.is(err.message, "Cannot find reference 'extrenal', did you mean 'external'?")
+      t.is(err.message, 'Cannot find reference "extrenal", did you mean "external"?')
     }
   })
 

package/test/required.test.js

@@ -36,11 +36,186 @@ test('object with required field', (t) => {
     })
     t.fail()
   } catch (e) {
-    t.is(e.message, 'str is required!')
+    t.is(e.message, '"str" is required!')
     t.pass()
   }
 })
 
+test('object with required field not in properties schema', (t) => {
+  t.plan(4)
+
+  const schema = {
+    title: 'object with required field',
+    type: 'object',
+    properties: {
+      num: {
+        type: 'integer'
+      }
+    },
+    required: ['str']
+  }
+  const stringify = build(schema)
+
+  try {
+    stringify({})
+    t.fail()
+  } catch (e) {
+    t.is(e.message, '"str" is required!')
+    t.pass()
+  }
+
+  try {
+    stringify({
+      num: 42
+    })
+    t.fail()
+  } catch (e) {
+    t.is(e.message, '"str" is required!')
+    t.pass()
+  }
+})
+
+test('object with required field not in properties schema with additional properties true', (t) => {
+  t.plan(4)
+
+  const schema = {
+    title: 'object with required field',
+    type: 'object',
+    properties: {
+      num: {
+        type: 'integer'
+      }
+    },
+    additionalProperties: true,
+    required: ['str']
+  }
+  const stringify = build(schema)
+
+  try {
+    stringify({})
+    t.fail()
+  } catch (e) {
+    t.is(e.message, '"str" is required!')
+    t.pass()
+  }
+
+  try {
+    stringify({
+      num: 42
+    })
+    t.fail()
+  } catch (e) {
+    t.is(e.message, '"str" is required!')
+    t.pass()
+  }
+})
+
+test('object with multiple required field not in properties schema', (t) => {
+  t.plan(6)
+
+  const schema = {
+    title: 'object with required field',
+    type: 'object',
+    properties: {
+      num: {
+        type: 'integer'
+      }
+    },
+    additionalProperties: true,
+    required: ['num', 'key1', 'key2']
+  }
+  const stringify = build(schema)
+
+  try {
+    stringify({})
+    t.fail()
+  } catch (e) {
+    t.is(e.message, '"num" is required!')
+    t.pass()
+  }
+
+  try {
+    stringify({
+      num: 42
+    })
+    t.fail()
+  } catch (e) {
+    t.is(e.message, '"key1" is required!')
+    t.pass()
+  }
+
+  try {
+    stringify({
+      num: 42,
+      key1: 'some'
+    })
+    t.fail()
+  } catch (e) {
+    t.is(e.message, '"key2" is required!')
+    t.pass()
+  }
+})
+
+test('object with required bool', (t) => {
+  t.plan(3)
+
+  const schema = {
+    title: 'object with required field',
+    type: 'object',
+    properties: {
+      num: {
+        type: 'integer'
+      }
+    },
+    additionalProperties: true,
+    required: ['bool']
+  }
+  const stringify = build(schema)
+
+  try {
+    stringify({})
+    t.fail()
+  } catch (e) {
+    t.is(e.message, '"bool" is required!')
+    t.pass()
+  }
+
+  try {
+    stringify({
+      bool: false
+    })
+    t.pass()
+  } catch (e) {
+    t.fail(e.message)
+  }
+})
+
+test('required nullable', (t) => {
+  t.plan(1)
+
+  const schema = {
+    title: 'object with required field',
+    type: 'object',
+    properties: {
+      num: {
+        type: ['integer']
+      }
+    },
+    additionalProperties: true,
+    required: ['null']
+  }
+  const stringify = build(schema)
+
+  try {
+    stringify({
+      null: null
+    })
+    t.pass()
+  } catch (e) {
+    t.fail(e.message)
+  }
+})
+
 test('required numbers', (t) => {
   t.plan(3)
 
@@ -74,7 +249,7 @@ test('required numbers', (t) => {
     })
     t.fail()
   } catch (e) {
-    t.is(e.message, 'num is required!')
+    t.is(e.message, '"num" is required!')
     t.pass()
   }
 })

package/test/sanitize2.test.js

@@ -0,0 +1,18 @@
+'use strict'
+
+const t = require('tap')
+const build = require('..')
+
+const payload = '(throw "pwoned")'
+
+const stringify = build({
+  properties: {
+    [`*///\\\\\\']);${payload};{/*`]: {
+      type: 'number'
+    }
+  }
+})
+
+stringify({})
+
+t.pass('no crashes')

package/test/sanitize3.test.js

@@ -0,0 +1,17 @@
+'use strict'
+
+const t = require('tap')
+const build = require('..')
+
+const stringify = build({
+  $defs: {
+    type: 'foooo"bar'
+  },
+  patternProperties: {
+    x: { $ref: '#/$defs' }
+  }
+})
+
+t.throws(() => {
+  stringify({ x: 0 })
+}, 'Cannot coerce 0 to "foo"bar"')

package/test/sanitize4.test.js

@@ -0,0 +1,14 @@
+'use strict'
+
+const t = require('tap')
+const build = require('..')
+
+const payload = '(throw "pwoned")'
+
+const stringify = build({
+  required: [`"];${payload}//`]
+})
+
+t.throws(() => {
+  stringify({})
+}, 'Error: ""];(throw "pwoned")//" is required!')

package/test/sanitize5.test.js

@@ -0,0 +1,16 @@
+'use strict'
+
+const t = require('tap')
+const build = require('..')
+
+const payload = '(throw "pwoned")'
+
+const expected = 'Error: Invalid regular expression: /*/: Nothing to repeat. Found at * matching {"type":"*/(throw \\"pwoned\\")){//"}'
+
+t.throws(() => {
+  build({
+    patternProperties: {
+      '*': { type: `*/${payload}){//` }
+    }
+  })
+}, expected)

package/test/sanitize6.test.js

@@ -0,0 +1,22 @@
+'use strict'
+
+const t = require('tap')
+const build = require('..')
+
+const payload = '(throw "pwoned")'
+
+const stringify = build({
+  type: 'object',
+  properties: {
+    '/*': { type: 'object' },
+    x: {
+      type: 'object',
+      properties: {
+        a: { type: 'string', default: `*/}${payload};{//` }
+      }
+    }
+  }
+})
+stringify({})
+
+t.pass('no crashes')