scope deepObject defaults code to query params only

[dtkav]

Fixes spread of defaults into other parameters

Redo #971
Fixes #1092
Fixes #1082

Changes proposed in this pull request:

• scope deepObject code to openapi3-only code blocks (defaults do not belong in uri_parsing, nor does deepObject logic make sense in an AbstractURIParser)
• fix set_default_values(...) which put defaults from any parameter type into all other parameters.

Future:

• modify testing fixtures to catch setting request.form, request.files, request.body etc unintentionally

[dtkav]

blocked by #1125

[dtkav]

@hjacobs this is a pretty nasty bug in the latest release. It would be great if you can have a look (after #1125)

[coveralls]

Coverage increased (+0.0002%) to 96.284% when pulling 8954948 on dtkav:fix_deep_objects into 77f2861 on zalando:master.

[hjacobs]

Do we have some test to catch this bug, apparently not? Can you add one?

[dtkav]

@hjacobs I made the default param test use strict_app which catches the bug on master.

[hjacobs]

👍