glm-5.3-flash
d81e7ef319
- value_to_path_segment now rejects scalar values whose decoded form is exactly '.', '..', '%2e', '%2E', '%2e%2e', or '%2E%2E' (case-insensitive) with INVALID_INPUT: url 2.5.8 Url::set_path silently normalizes lone dot segments away, so such values would route to a different upstream endpoint than the template describes, with namespace credentials attached - rejection is exact-match on the full decoded segment: dotted values like v1.2.3, .hidden-file, ..hidden, ... still render - error names the failure mode but never echoes the raw value - empirically pins the set_path normalization behavior in a test (tenants/../resources -> /resources, /files/.. -> /, %2E%2E -> normalized) Verification: scripts/verify.sh (382 passed) and --all-features (498 passed), clippy -D warnings, fmt --check all pass.