From ddea952856183df967b29665b080f590265e91a7 Mon Sep 17 00:00:00 2001 From: kiannidev <156195510+kiannidev@users.noreply.github.com> Date: Wed, 1 Jul 2026 11:08:22 +0200 Subject: [PATCH] test(crypto): cover uppercase hex in timingSafeEqualHex Lock in case-insensitive hex parsing used by webhook signature verification. Co-authored-by: Cursor --- test/unit/crypto.test.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/test/unit/crypto.test.ts b/test/unit/crypto.test.ts index 90ef7f836a..9261bf5a84 100644 --- a/test/unit/crypto.test.ts +++ b/test/unit/crypto.test.ts @@ -27,6 +27,7 @@ describe("webhook signature verification", () => { expect(timingSafeEqualHex("", "00")).toBe(false); expect(timingSafeEqualHex("00", "01")).toBe(false); expect(timingSafeEqualHex("00", "00")).toBe(true); + expect(timingSafeEqualHex("ABCD", "abcd")).toBe(true); }); it("uses timing-safe token comparisons and one-way token hashes", async () => {