Skip test for regular expression timeout attack

On Ruby < 3.2.

Author: marksmith

test/aikido/zen/scanners/sql_injection_scanner_test.rb

@@ -276,16 +276,20 @@ def refute_attack(query, input = query, *args)
   end
 
   test "it flags regular expression matching timeouts as attacks" do
-    timeout = Regexp.timeout
-    Regexp.timeout = 0.01
+    skip if RUBY_VERSION < "3.2"
 
-    refute_attack "SELECT * FROM users WHERE id IN (123,)", "123,"
+    begin
+      timeout = Regexp.timeout
+      Regexp.timeout = 0.01
 
-    input = "1," * 1 * 1024 * 1024
+      refute_attack "SELECT * FROM users WHERE id IN (123,)", "123,"
 
-    assert_attack "SELECT * FROM users WHERE id IN (#{input})", input
-  ensure
-    Regexp.timeout = timeout
+      input = "1," * 1 * 1024 * 1024
+
+      assert_attack "SELECT * FROM users WHERE id IN (#{input})", input
+    ensure
+      Regexp.timeout = timeout
+    end
   end
 
   test "attacks are not prevented if libzen can't be loaded" do