Repository navigation

Harden transaction request deserialization by removing unsafe TypeNameHandling - #1716

Merged

StuartFerguson merged 8 commits into

copilot/fix-typenamehandling-security-issue

Apr 7, 2026

Merged

Harden transaction request deserialization by removing unsafe TypeNameHandling#1716
StuartFerguson merged 8 commits into
masterfrom
copilot/fix-typenamehandling-security-issue

Commits on Apr 7, 2026
- Initial plan
  Copilot
  authored
  83620ab
- fix: replace unsafe transaction request polymorphic deserialization
  
  Copilot
  and
  StuartFerguson
  authored
  3728b14
- test: tighten transaction request discriminator checks
  
  Copilot
  and
  StuartFerguson
  authored
  513ba6f
- fix: address codacy follow-up in transaction handlers
  
  Copilot
  and
  StuartFerguson
  authored
  ad5e694
- fix: use explicit safe serializer for transaction request parsing
  
  Copilot
  and
  StuartFerguson
  authored
  5bde6c9
- refactor: replace repeated discriminator strings with named helpers
  
  Copilot
  and
  StuartFerguson
  authored
  0073c59
- test: avoid executing bad request result in handler test
  
  Copilot
  and
  StuartFerguson
  authored
  0bf2be3
- some tweaks
  StuartFerguson
  committed
  dde7c4b