fix: validate path parameters and prevent traversal/injection in REST transcoder - #67

Merged

quartzmo merged 10 commits into

googleapis:mainfrom

quartzmo:gapic-common-validation

Sep 28, 2026

Commits on Aug 3, 2026

fix: validate path parameters and prevent traversal/injection in REST transcoder
quartzmo
committed
75929fa
fix: simplify rest transcoder double-wildcard validation to fail always on dots
quartzmo
committed
e52d7fb
docs: clarify validation rules and empty segment handling in validate_path_binding!
quartzmo
committed
25e80c6
docs: use standard (*) and path (**) indicators in validate_field_binding! comment
quartzmo
committed
865c1cc
refactor: unify standard and path parameter validation methods in REST transcoder
quartzmo
committed
a8270fd

Commits on Aug 4, 2026

docs: document that bind_uri_values! raises Gapic::Common::Error
quartzmo
committed
844b429

Commits on Aug 27, 2026

fix(rest): unescape path parameter values and format validation messages
quartzmo
committed
d0210db

Commits on Aug 28, 2026

fix(rest): remove ? and # checks and rely on escaping
quartzmo
committed
37844ca

Commits on Sep 18, 2026

fix(rest): remove unescape step from path parameter validation
quartzmo
committed
d4bae9c

Commits on Sep 25, 2026

fix(rest): standardize validation error messages with quoted segments
quartzmo
committed
72af707