Merge PR #3122: LC-002: reject non-object script parameters

2026-11-01 14:07:34 -06:00 · 2026-10-31 02:06:53 +00:00
parent 15a046c537 b576c72d0b
commit 328e42373c
2 changed files with 31 additions and 1 deletions
@@ -567,7 +567,11 @@ fn run(args: &[String]) -> Result<(), String> {
                .or(v.get("method"))
                .and_then(Value::as_str)
                .ok_or_else(|| format!("{path}:{}: needs `command` or `method`", n + 1))?;
-            let params = v.get("params").cloned().filter(|p| p.is_object()).unwrap_or_else(|| json!({}));
+            let params = match v.get("params") {
+                None | Some(Value::Null) => json!({}),
+                Some(Value::Object(params)) => Value::Object(params.clone()),
+                Some(_) => return Err(format!("{path}:{}: `params` must be a JSON object", n + 1)),
+            };
            steps.push(Step { id: id.to_string(), params });
        }
    }