candle-annotator/openspec/changes
Marko Djordjevic 870f92d208 feat: add run_id format validation in DELETE training/runs endpoint
Validate that run_id matches /^[a-zA-Z0-9_-]+$ regex before interpolating into the API URL.
Returns HTTP 400 with 'Invalid run_id format' error if validation fails.
This prevents potential URL injection attacks and invalid identifier usage.
2026-02-18 10:58:54 +01:00
..
archive sync: ml-ui-connection delta specs to main specs 2026-02-18 10:21:05 +01:00
code-review-fix feat: add run_id format validation in DELETE training/runs endpoint 2026-02-18 10:58:54 +01:00