base-org/pessimism

API Request Validation Submodule

Opened this issue · 3 comments

epociask commented

Problem

Currently, Pessimism's API supports no request validation module nor request validation for invariant deployment requests. This means that request bodies that successfully unmarshall can contain invalid data fields that could result in unforeseen consequences when the server attempts to process the request.

Problem Solution

Implement API validation logic to ensure that requests fields are properly vetted before triggering subsystem logic. This will require analyzing each structured request body (ie. InvariantRequest) field to understand how a variable's expression should be constrained and which value ranges should be applied to it.

MindlessSteel commented

I have to agree with the
Above suggest and comment on this base protocol in development!

engr0001 commented

It would be also great if we could alert certain events via Telegram

0x0Saint commented

well, have you tried s.th in practice with this solution?