codeql/javascript/ql/test/query-tests/Security/CWE-400/ReDoS/jsonschema.js

import Ajv from 'ajv';

let thing = {
    type: 'string',
    pattern: '(a?a?)*b' // $ Alert[js/redos]
}
new Ajv().addSchema(thing, 'thing');

export default {
    $schema: "http://json-schema.org/draft-07/schema#",
    type: "object",
    properties: {
        foo: {
            type: "string",
            pattern: "(a?a?)*b" // $ Alert[js/redos]
        },
        bar: {
            type: "object",
            patternProperties: {
                "(a?a?)*b": { // $ Alert[js/redos]
                    type: "number"
                }
            }
        }
    }
};