John T. MyersandJohn Myers e8950e624c feat(sandbox): add L7 query parameter matchers (#617) ...

* feat(sandbox): add L7 query parameter matchers

Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>

* fix(sandbox): decode + as space in query params and validate glob syntax

Three improvements from PR #617 review:

1. Decode + as space in query string values per the
   application/x-www-form-urlencoded convention. This matches Python's
   urllib.parse, JavaScript's URLSearchParams, Go's url.ParseQuery, and
   most HTTP frameworks. Literal + should be sent as %2B.

2. Add glob pattern syntax validation (warnings) for query matchers.
   Checks for unclosed brackets and braces in glob/any patterns. These
   are warnings (not errors) because OPA's glob.match is forgiving,
   but they surface likely typos during policy loading.

3. Add missing test cases: empty query values, keys without values,
   unicode after percent-decoding, empty query strings, and literal +
   via %2B encoding.

* fix(sandbox): add missing query_params field in forward proxy L7 request info

* style(sandbox): fix formatting in proxy L7 query param parsing

---------

Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>
Co-authored-by: John Myers <johntmyers@users.noreply.github.com>

2026-03-30 13:53:12 -07:00

..

default-policy.md

refactor(sandbox): sandboxes are managed as separate community images (#267)

2026-03-12 22:06:52 -07:00

gateway-auth.md

docs: add dedicated gateway docs, network policy tutorial, and license page (#294)

2026-03-14 09:53:01 -07:00

policy-schema.md

feat(sandbox): add L7 query parameter matchers (#617)

2026-03-30 13:53:12 -07:00

support-matrix.md

docs: unify install command in landing page, change docs skill name, update contributing guides (#355)

2026-03-16 07:51:42 -07:00