Validate metadata inputs across legacy and new API paths, clone proxies before decryption - #12950

Merged

gnodet merged 7 commits into

apache:masterfrom

slachiewicz:pr/legacy-compat-master

Sep 1, 2026

Commits on Aug 30, 2026

Validate repository key and metadata version tokens on the legacy path
slachiewicz
committed
edca350
Clone proxy before decrypting its password
slachiewicz
committed
9b3b7b6
Validate the repository key used in legacy metadata file names
slachiewicz
committed
8ac81cd

Commits on Aug 31, 2026

Honour configured checksum policy on the legacy compat paths

gnodet
and
claude
committed
6ff4b8a

Commits on Sep 1, 2026

Validate metadata inputs and relocation coordinates in the new API resolvers

gnodet
and
claude
committed
5e1e17e
Address review: simplify validateVersionToken, replace NUL bytes in test

gnodet
and
claude
committed
6d62d5b
Merge master after Set 3 merge: resolve conflicts keeping MetadataInputValidator

gnodet
and
claude
committed
4a2aa7e