Update recover method of NFT module to validate NFT attributes array

framework/src/modules/nft/method.ts

@@ -12,6 +12,7 @@
  * Removal or modification of this copyright notice is prohibited.
  */
 
+import { validator } from '@liskhq/lisk-validator';
 import { codec } from '@liskhq/lisk-codec';
 import { BaseMethod } from '../base_method';
 import { FeeMethod, InteroperabilityMethod, ModuleConfig, TokenMethod } from './types';
@@ -895,18 +896,19 @@ export class NFTMethod extends BaseMethod {
 	): Promise<void> {
 		const nftStore = this.stores.get(NFTStore);
 		const nftID = storeKey;
-		let isDecodable = true;
+		let isValidInput = true;
 		let decodedValue: NFTStoreData;
 		try {
 			decodedValue = codec.decode<NFTStoreData>(nftStoreSchema, storeValue);
+			validator.validate(nftStoreSchema, decodedValue);
 		} catch (error) {
-			isDecodable = false;
+			isValidInput = false;
 		}
 
 		if (
 			!substorePrefix.equals(nftStore.subStorePrefix) ||
 			storeKey.length !== LENGTH_NFT_ID ||
-			!isDecodable
+			!isValidInput
 		) {
 			this.events.get(RecoverEvent).error(
 				methodContext,

framework/test/unit/modules/nft/method.spec.ts

@@ -1668,6 +1668,31 @@ describe('NFTMethod', () => {
 			);
 		});
 
+		it('should throw and emit error recover event if module name length in attributes array is not valid', async () => {
+			const newStoreValue = codec.encode(nftStoreSchema, {
+				owner: utils.getRandomBytes(LENGTH_CHAIN_ID),
+				attributesArray: [
+					{ module: 'customMod1', attributes: Buffer.alloc(5) },
+					{ module: '', attributes: Buffer.alloc(2) },
+				],
+			});
+
+			await expect(
+				method.recover(methodContext, terminatedChainID, substorePrefix, storeKey, newStoreValue),
+			).rejects.toThrow('Invalid inputs');
+			checkEventResult<RecoverEventData>(
+				methodContext.eventQueue,
+				1,
+				RecoverEvent,
+				0,
+				{
+					terminatedChainID,
+					nftID: storeKey,
+				},
+				NftEventResult.RESULT_RECOVER_FAIL_INVALID_INPUTS,
+			);
+		});
+
 		it('should throw and emit error recover event if nft chain id is not same as own chain id', async () => {
 			await expect(
 				method.recover(methodContext, terminatedChainID, substorePrefix, storeKey, storeValue),