fix: reject malformed host target paths

This commit is contained in:
2026-09-29 06:35:10 +09:00
parent 2efda433e7
commit 653a1171a2
3 changed files with 47 additions and 7 deletions
+3 -2
View File
@@ -175,8 +175,9 @@ descriptor; generated descriptors contain neither those references nor Rust
trait identity.
Dispatch is qualified by interface reference and operation name and targets a
canonical Worldspace path. An `ObjectProvider` resolves that path exactly once
inside `with_object`; the host then checks the supplied object validator,
canonical Worldspace path. An `ObjectProvider` validates that path before
resolution, maps malformed paths to `InvalidRequest`, then resolves a valid path
exactly once inside `with_object`; the host checks the supplied object validator,
current interface membership, interface validator, descriptor operation,
operation-specific object-validator policy, arguments, and authorization in
canonical precedence. Path and children remain provider resolution context and