Validate packageUrlJson structure in makePackageUrl method

2025-05-12 22:25:29 +00:00
parent 47ec470b21
commit 73e1388139
3 changed files with 13 additions and 3 deletions
@@ -36132,7 +36132,11 @@ class ComponentDetection {
    }
    static makePackageUrl(packageUrlJson) {
        // Handle case when packageUrlJson is null or undefined
-        if (!packageUrlJson) {
+        if (!packageUrlJson ||
+            typeof packageUrlJson.Scheme !== 'string' ||
+            typeof packageUrlJson.Type !== 'string' ||
+            !packageUrlJson.Scheme ||
+            !packageUrlJson.Type) {
            core.debug(`Warning: Received null or undefined packageUrlJson. Unable to create package URL.`);
            return ""; // Return a blank string for unknown packages
        }