fix(component-tests): dynamic import invocation without existence check

A module loader function is resolved from `metaGlobComponents[componentPath]` and invoked without verifying it exists. A crafted route param that does not match a key can result in invoking `undefined`, causing runtime errors and potential repeated 500 responses (DoS-by-error for that endpoint).

Signed-off-by: tomaioo <203048277+tomaioo@users.noreply.github.com>

Author: tomaioo

apps/component-tests/src/components/showcase-test/showcase-test.tsx

@@ -11,9 +11,20 @@ export const ShowcaseTest = component$(() => {
   const MetaGlobComponentSig = useSignal<Component<any>>();
 
   useTask$(async () => {
-    MetaGlobComponentSig.value =
-      await // eslint-disable-next-line @typescript-eslint/no-explicit-any
-      (metaGlobComponents[componentPath] as () => Promise<Component<any>>)();
+    const componentLoader = metaGlobComponents[componentPath] as
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      (() => Promise<Component<any>>) | undefined;
+
+    if (!componentLoader) {
+      MetaGlobComponentSig.value = undefined;
+      return;
+    }
+
+    try {
+      MetaGlobComponentSig.value = await componentLoader();
+    } catch {
+      MetaGlobComponentSig.value = undefined;
+    }
   });
 
   return (