Skip to content

feat: protect URL path integrity from unsafe interpolated values#12

Merged
maxholman merged 3 commits intoblock65:masterfrom
maxholman:feat/encode-path-params
Mar 17, 2026
Merged

feat: protect URL path integrity from unsafe interpolated values#12
maxholman merged 3 commits intoblock65:masterfrom
maxholman:feat/encode-path-params

Conversation

@maxholman
Copy link
Contributor

@maxholman maxholman commented Mar 17, 2026

Summary

  • Add encodePath tagged template literal that applies encodeURIComponent to interpolated path parameters, preventing /, #, and other reserved characters from corrupting URL structure
  • Fix hono-valibot middleware export names to use camelCase
  • Regenerate all test fixtures

Test plan

  • All 4 existing test suites pass
  • Verify generated commands.ts output uses encodePath tag for parameterised paths and plain strings for static paths

🤖 Generated with Claude Code

maxholman and others added 3 commits March 17, 2026 22:44
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Path parameters containing `/`, `#`, or other reserved characters would
corrupt the URL structure. A tagged template literal now applies
encodeURIComponent to all interpolated path segments.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@maxholman maxholman merged commit caf2797 into block65:master Mar 17, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant