Issue 004: Attach request validation middleware globally
Area: Backend
Priority: High
Files: services/api/src/main.rs, services/api/src/validation.rs
Problem
Query and path validation middleware is defined but not applied to all route groups. Suspicious payloads can reach handlers unfiltered.
Acceptance Criteria
- Suspicious query/path payloads are rejected with 400\n- Safe traffic is unaffected\n- Integration tests cover blocked and allowed cases\n- Validation rules are documented
Issue 004: Attach request validation middleware globally
Area: Backend
Priority: High
Files: services/api/src/main.rs, services/api/src/validation.rs
Problem
Query and path validation middleware is defined but not applied to all route groups. Suspicious payloads can reach handlers unfiltered.
Acceptance Criteria