jsonrainbow/json-schema

If you try to run the following code with your package (version 6.10.0) : $validator = new Validator(); $payload = json_decode(json_encode(["test" => "1"])); $validator->validate( value : $payload, schema : json_decode(json_encode([ "type" => "object", "properties" => [ "test" => [ "type" => "boolean", ] ], "required" => ["test"], "additionalProperties" => false, '$schema' => 'file://' . PROJECT_ROOT . '/vendor/justinrainbow/json-schema/dist/schema/json-schema-draft-04.json' ])), checkMode: Constraint::CHECK_MODE_VALIDATE_SCHEMA | Constraint::CHECK_MODE_APPLY_DEFAULTS | Constraint::CHECK_MODE_COERCE_TYPES ); if (!$validator->isValid()) { $validation_errors = []; foreach ($validator->getErrors() as $error) {

Validating a string containing a NUL byte against {"type": "string", "format": "date"} throws instead of reporting the instance invalid. <?php require 'vendor/autoload.php'; $validator = new JsonSchema\Validator(); $data = "2020-01-01\x00"; $validator->validate($data, (object)['type' => 'string', 'format' => 'date']); var_dump($validator->isValid()); Expected: bool(false) - the value is not a valid RFC 3339 full-date. Actual: PHP Fatal error: Uncaught ValueError: DateTime::createFromFormat(): Argument #2 ($datetime) must not contain any null bytes in .../src/JsonSchema/Constraints/FormatConstraint.php:157 Versions: json-schema 6.10.0 and 6.7.2.0, PHP 8.1.34. Both affected. Cause FormatConstraint::validateDateTime() (src/JsonSchema/Constraints/FormatConstraint.php:157) calls: $dt = \DateTime::createFromFormat($format, (string) $datetime); In PHP 8, DateTime::createFromFormat() raises ValueError when the datetime argument contains a NUL byte, rather than returning false as it did in

There are more PHP files which we should check for styling issues: bin/run-test-case bin/validate-json demo/demo.php

I have found that if a payload contains a date-time with more than 6 fractional seconds it will fail validation. Issue seems to stem from the fact that PHP DateTime will only allow 6 digits and fail after that. Could it truncate the fractional seconds to 6 digits before parsing it? Rfc3339::createFromString('2026-07-23T10:46:08.4070000Z')); var_dump(DateTimeImmutable::createFromFormat('Y-m-d H:i:s.uP', '2026-07-23 10:46:08.4070000' . 'Z', new \DateTimeZone('UTC'))); var_dump(DateTimeImmutable::createFromFormat('Y-m-d H:i:s.uP', '2026-07-23 10:46:08.407000' . 'Z', new \DateTimeZone('UTC')));