From 6bc4c2adf8104799ec08fa335c9a3501d5cf4d10 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jakub=20Jare=C5=A1?= <me@jakubjares.com>
Date: Fri, 5 Apr 2024 12:52:51 +0200
Subject: [PATCH] Rewrite testhost.json

---
 src/redist/targets/GenerateLayout.targets | 24 +++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/src/redist/targets/GenerateLayout.targets b/src/redist/targets/GenerateLayout.targets
index 1616e94027c8..412ca545cddd 100644
--- a/src/redist/targets/GenerateLayout.targets
+++ b/src/redist/targets/GenerateLayout.targets
@@ -481,6 +481,29 @@
                       Overwrite="true" />
   </Target>
 
+  <Target Name="FixNewtonsoftInTesthostDepsJson" >
+
+    <!-- Patch version of Newtonsoft.Json in testhost.deps.json, because it is picked up by 
+    compliance checking scripts as a false-positive vulnerability. -->
+
+    <ItemGroup>
+      <NewtonSoftJsonVersionReplacement Include="%22Newtonsoft.Json%22: %2213.0.0.0%22">
+        <ReplacementString>"Newtonsoft.Json": "13.0.1.0"</ReplacementString>
+      </NewtonSoftJsonVersionReplacement>
+      <NewtonSoftJsonVersionReplacement Include="Newtonsoft.Json/13.0.0.0">
+        <ReplacementString>Newtonsoft.Json/13.0.1.0</ReplacementString>
+      </NewtonSoftJsonVersionReplacement>
+    </ItemGroup>
+
+    <ItemGroup>
+      <TestHostDepsJsonPath Include="$(OutputPath)/**/testhost.deps.json" />
+    </ItemGroup>
+    <ReplaceFileContents
+      InputFiles="@(TestHostDepsJsonPath)"
+      DestinationFiles="@(TestHostDepsJsonPath)"
+      ReplacementItems="@(NewtonSoftJsonVersionReplacement)" />
+  </Target>
+
   <Target Name="CopyIncludedWorkloadManifestFile" >
 
     <ItemGroup>
@@ -573,6 +596,7 @@
                             LayoutWorkloadUserLocalMarker;
                             LayoutBundledTools;
                             RetargetTools;
+                            FixNewtonsoftInTesthostDepsJson;
                             CrossgenLayout;
                             LayoutAppHostTemplate;
                             GeneratePrecomputedRarCache;