The validation of the cpe23Type does not support strings such as
cpe:2.3:a:ahmed_h.:spdx-tools:0.8.3.dev1+g8050fd9c:*:*:*:*:*:*:* The version string contains +
cpe:2.3:a:debian_gcc_maintainers:libstdc++6:12.2.0-9:*:*:*:*:*:*:* The product name contains +. The cpe definition states a product name can not contain spaces, slashes, or most special characters. An underscore should be used in place of whitespace characters. Is '+' considered a special character?
Note that the SPDX file is reported as valid when using the SPDX online tool validator.
Do we have inconsistency in validation between the Python and Java tools.
(Tested with latest version of the Python Tools)
The validation of the cpe23Type does not support strings such as
cpe:2.3:a:ahmed_h.:spdx-tools:0.8.3.dev1+g8050fd9c:*:*:*:*:*:*:*The version string contains +cpe:2.3:a:debian_gcc_maintainers:libstdc++6:12.2.0-9:*:*:*:*:*:*:*The product name contains +. The cpe definition states a product name can not contain spaces, slashes, or most special characters. An underscore should be used in place of whitespace characters. Is '+' considered a special character?Note that the SPDX file is reported as valid when using the SPDX online tool validator.
Do we have inconsistency in validation between the Python and Java tools.
(Tested with latest version of the Python Tools)