From afcc1665b20db0cd92b45e5242d340cfee6f630f Mon Sep 17 00:00:00 2001
From: A <258483684+la14-1@users.noreply.github.com>
Date: Fri, 13 Mar 2026 09:50:48 -0700
Subject: [PATCH] test: remove duplicate heredoc test in security.test.ts
 (#2583)

"should reject heredoc syntax in operator combinations" tested a single
case ("Input << EOF") that is fully covered by the broader "should reject
heredoc syntax" test (3 cases: << EOF, <<- HEREDOC, <<MARKER).

1 test removed, 0 expect() calls lost (the exact input pattern is covered
by the remaining test).

-- qa/dedup-scanner

Co-authored-by: spawn-qa-bot <qa@openrouter.ai>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: L <6723574+louisgv@users.noreply.github.com>
---
 packages/cli/src/__tests__/security.test.ts | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/packages/cli/src/__tests__/security.test.ts b/packages/cli/src/__tests__/security.test.ts
index 9ed4192d..0dc55ef7 100644
--- a/packages/cli/src/__tests__/security.test.ts
+++ b/packages/cli/src/__tests__/security.test.ts
@@ -483,10 +483,6 @@ describe("validatePrompt", () => {
     expect(() => validatePrompt("Start server &")).toThrow("shell syntax");
   });
 
-  it("should reject heredoc syntax in operator combinations", () => {
-    expect(() => validatePrompt("Input << EOF")).toThrow("shell syntax");
-  });
-
   it("should accept legitimate uses of ampersand and pipes in text", () => {
     expect(() => validatePrompt("Smith & Jones corporation")).not.toThrow();
     expect(() => validatePrompt("Rock & roll music")).not.toThrow();