- Reject non-numeric product_id and sku_id with HTTP 400 before any upstream request is made, preventing parameter injection into Microsoft API query strings. - Replace all fmt.Sprintf URL construction with url.Values.Set + .Encode() across handleSkuInfo, handleProxy, and setupSession, ensuring values are always percent-encoded correctly. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| Dockerfile | ||
| go.mod | ||
| go.sum | ||
| main.go | ||