Skip to content

Commit d0db489

Browse files
committed
Added test for PURL qualifiers with key and no value validation
1 parent 694e153 commit d0db489

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

test/unit-tests/cve/validatePurlTest.js

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -116,6 +116,12 @@ const RecordNoPurl = [
116116
}
117117
]
118118

119+
const PurlQualifierKeyNoValueRecord = [
120+
{
121+
packageURL: 'pkg:npm/package-name?qualifier&test=value'
122+
}
123+
]
124+
119125
describe('Testing validatePURL middleware', () => {
120126
context('Positive Tests', () => {
121127
it('Should validate a correctly formatted PURL ', () => {
@@ -171,6 +177,10 @@ describe('Testing validatePURL middleware', () => {
171177
expect(() => purlValidateHelper(RecordQualifierVersionPurl)).to.throw('PURL versions are currently not supported by the CVE schema: ' + RecordQualifierVersionPurl[0].packageURL)
172178
})
173179

180+
it('Should fail to validate when a qualifier has a key and no value ', () => {
181+
expect(() => purlValidateHelper(PurlQualifierKeyNoValueRecord)).to.throw('Qualifier keys must have a value: ' + PurlQualifierKeyNoValueRecord[0].packageURL)
182+
})
183+
174184
it('Should fail to validate when a PURL contain an encoded colon ', () => {
175185
expect(() => purlValidateHelper(PurlEncodedColonRecord)).to.throw('Percent-encoded colons are not allowed in a PURL: ' + PurlEncodedColonRecord[0].packageURL)
176186
})

0 commit comments

Comments
 (0)