fix: Do not let a malformed WebSocket frame escape the message listener (#33275)

Signed-off-by: Arpit Jain <arpitjain099@gmail.com>

lib/extension/frontend.ts

@@ -163,8 +163,13 @@ export class Frontend extends Extension {
         ws.on("message", (data: Buffer, isBinary: boolean) => {
             if (!isBinary && data) {
                 const message = data.toString();
-                const {topic, payload} = JSON.parse(message);
-                this.mqtt.onMessage(`${this.mqttBaseTopic}/${topic}`, Buffer.from(stringify(payload)));
+
+                try {
+                    const {topic, payload} = JSON.parse(message);
+                    this.mqtt.onMessage(`${this.mqttBaseTopic}/${topic}`, Buffer.from(stringify(payload)));
+                } catch {
+                    logger.error(`Received invalid message from WebSocket: ${message}`);
+                }
             }
         });
 

test/extensions/frontend.test.ts

@@ -262,6 +262,12 @@ describe("Extension: Frontend", () => {
         mockWSClientEvents.message(null, false);
         await flushPromises();
 
+        // Malformed payload, must not escape the listener
+        mockLogger.error.mockClear();
+        expect(() => mockWSClientEvents.message("not json", false)).not.toThrow();
+        expect(mockLogger.error).toHaveBeenCalledWith("Received invalid message from WebSocket: not json");
+        await flushPromises();
+
         // Error
         mockWSClientEvents.error(new Error("This is an error"));
         expect(mockLogger.error).toHaveBeenCalledWith("WebSocket error: This is an error");