Harden transaction request deserialization by removing unsafe TypeNameHandling#1716

Merged

StuartFerguson merged 8 commits intomasterfrom

copilot/fix-typenamehandling-security-issue

Apr 7, 2026

Commits on Apr 7, 2026

Initial plan
Copilot
authored
fix: replace unsafe transaction request polymorphic deserialization

Copilot
and
StuartFerguson
authored
test: tighten transaction request discriminator checks

Copilot
and
StuartFerguson
authored
fix: address codacy follow-up in transaction handlers

Copilot
and
StuartFerguson
authored
fix: use explicit safe serializer for transaction request parsing

Copilot
and
StuartFerguson
authored
refactor: replace repeated discriminator strings with named helpers

Copilot
and
StuartFerguson
authored
test: avoid executing bad request result in handler test

Copilot
and
StuartFerguson
authored
some tweaks
StuartFerguson
committed