search

adorsys / datasafe

Secure, Encrypted and Versioned Data Storage Library
https://adorsys.github.io/datasafe/
GNU Affero General Public License v3.0
55 stars 24 forks source link

More restrictive API for String arguments #185

Closed valb3r closed 4 months ago

valb3r commented 5 years ago

Currently some String based constructors, factory methods that are intended for internal use (i.e. Uri, BasePrivateResource.forPrivate ...) are not safe to use with non-url safe Strings. While it does not affect global usage as *Request api can accept any type of String, it is better to hide those String (Uri, BasePrivateResource.for..) constructors as implementation detail if needed and expose url-safe variants.

francis-pouatcha commented 5 months ago

Search and find all API constructors that use String.

forkimenjeckayang commented 5 months ago

Greetings Sir @francis-pouatcha , should this first of all be a documentation on URL-Safe Strings with regards to an API. Need more clarification on this ticket before working on it.

francis-pouatcha commented 5 months ago

It is about locating which rest API have unsafe strings in their parameter.

francis-pouatcha commented 4 months ago

Waiting for