fix: validate path parameters and prevent traversal/injection in REST transcoder - #67

Open

quartzmo wants to merge 8 commits into

googleapis:mainfrom

quartzmo:gapic-common-validation

Commits on Aug 3, 2026

fix: validate path parameters and prevent traversal/injection in REST transcoder
quartzmo
committed
75929fa
fix: simplify rest transcoder double-wildcard validation to fail always on dots
quartzmo
committed
e52d7fb
docs: clarify validation rules and empty segment handling in validate_path_binding!
quartzmo
committed
25e80c6
docs: use standard (*) and path (**) indicators in validate_field_binding! comment
quartzmo
committed
865c1cc
refactor: unify standard and path parameter validation methods in REST transcoder
quartzmo
committed
a8270fd

Commits on Aug 4, 2026

docs: document that bind_uri_values! raises Gapic::Common::Error
quartzmo
committed
844b429

Commits on Aug 27, 2026

fix(rest): unescape path parameter values and format validation messages
quartzmo
committed
d0210db

Commits on Aug 28, 2026

fix(rest): remove ? and # checks and rely on escaping
quartzmo
committed
37844ca