Reading the code for getRequestedBlockFromCar it looks in cases where a path is passed for a RAW request, the returned block is root block, rather than block at the end of the path (which is what is supposed to happen for a RAW request in the Path gateway spec). However, this would be a trustful request anyway, because you don't have the blocks to verify the raw block at the end. so I think the proper behavior is to 400 any request in format=RAW where a path is present.
What
Reading the code for getRequestedBlockFromCar it looks in cases where a path is passed for a RAW request, the returned block is root block, rather than block at the end of the path (which is what is supposed to happen for a RAW request in the Path gateway spec). However, this would be a trustful request anyway, because you don't have the blocks to verify the raw block at the end. so I think the proper behavior is to 400 any request in format=RAW where a path is present.