fix(cloudflare,discord): reject path traversal in interpolated resource IDs - #7259

Closed

waleedlatif1 wants to merge 9 commits into

fix/cloudflare-discord-path-safety

Commits on Aug 29, 2026

fix(cloudflare,discord): reject path traversal in interpolated resource IDs
waleedlatif1
committed
b0f53c6
test(cloudflare,discord): fuzz path params one at a time, not as a whole object
waleedlatif1
committed
12ffff0
test(cloudflare,discord): probe every branch, drop `any`, name unbuildable tools
waleedlatif1
committed
65a0787
fix(discord): stop a pre-trim from rejecting numeric snowflakes
waleedlatif1
committed
71bc9da
fix(discord): finish the numeric-id fix in body and operation builders
waleedlatif1
committed
48175cd
fix(discord,cloudflare): guard the send-message sink, pin the query in tests
waleedlatif1
committed
dc7f647
fix(discord): preserve the documented @me alias in user-ID slots
waleedlatif1
committed
39a7df9
fix(cloudflare): always report the deleted bucket name as a string
waleedlatif1
committed
c5dd245
fix(cloudflare): refuse a padded bucket name on the irreversible delete
waleedlatif1
committed
c6968f0