ruby-grape / grape / 30215793031 / 24

97%

master: 97%

push

github

Guard length, same_as and oneof against non-hash params (#2816)

These were the only three validators reading params[attr_name] without
the hash_like? guard the other seven have. When an Array-typed scope
receives non-hash elements (GET ?list[]=str), the iterator yields each
element as the params container, String#[](Symbol) raises TypeError,
and run_validators only rescues validation exceptions — so a malformed
request produced a 500. Skipping like ValuesValidator does lets the
presence/coerce validators report the 400.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

224 of 1256 branches covered (17.83%)

Branch coverage included in aggregate %.

2374 of 3853 relevant lines covered (61.61%)

7.61 hits per line