From ecd4f22117cde25bc2a258daaf91120e5cb2d492 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Mon, 2 Mar 2026 12:50:26 +0100
Subject: [PATCH] chore: harden schema validators

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 tools/src/test/js/json-schema-functional-tests.js | 1 +
 tools/src/test/js/json-schema-lint-tests.js       | 1 +
 2 files changed, 2 insertions(+)

diff --git a/tools/src/test/js/json-schema-functional-tests.js b/tools/src/test/js/json-schema-functional-tests.js
index 9dc1625c..dcf9bbbf 100644
--- a/tools/src/test/js/json-schema-functional-tests.js
+++ b/tools/src/test/js/json-schema-functional-tests.js
@@ -56,6 +56,7 @@ const ajv = new Ajv({
     strict: false,
     validateFormats: true,
     addUsedSchema: false,
+    loadSchema: (uri) => { throw new Error(`Remote schemas are disabled: ${uri}`) },
     schemas: {
         'http://cyclonedx.org/schema/spdx.schema.json': spdxSchema,
         'http://cyclonedx.org/schema/jsf-0.82.schema.json': jsfSchema,
diff --git a/tools/src/test/js/json-schema-lint-tests.js b/tools/src/test/js/json-schema-lint-tests.js
index b8411fcd..1a959c2d 100644
--- a/tools/src/test/js/json-schema-lint-tests.js
+++ b/tools/src/test/js/json-schema-lint-tests.js
@@ -52,6 +52,7 @@ function getAjv(strict) {
         addUsedSchema: false,
         allowUnionTypes: false,
         keywords: ["meta:enum"],
+        loadSchema: (uri) => { throw new Error(`Remote schemas are disabled: ${uri}`) },
         schemas: {
             'http://cyclonedx.org/schema/spdx.schema.json': spdxSchema,
             'http://cyclonedx.org/schema/jsf-0.82.schema.json': jsfSchema,