Study a solution to sanitize URL parameters in API

[tloubrieu-jpl]

💡 Description

There might be a library or methodology to reject any suspicious parameters from the API. That might be part of spring boot (we can dream).

[al-niessner]

@jordanpadams @tloubrieu-jpl

Does spring-* process the URL prior to swaggerhub code getting a hold of it? If we can say spring-* passes all URLs through and that swaggerhub handles errors then what sanitation needs to take place?

[jordanpadams]

@al-niessner I think this is related to some of the vulnerabilities identified here: #121

[jordanpadams]

if any of those require us to sanitize URLs to ensure they do not allow anything vulnerabilities in the service

[jordanpadams]

Moving to icebox for now. Not vulnerabilities identified at this time and current API only allows read access directly to/from OpenSearch