Filter invalid characters from the type name
Committed by alexander-fenster
fix: filter invalid characters from the type name (#2127)
Fixes #2124.
There is no reason why the type name would contain anything other than
alphanumeric characters. Filter the remaining characters with a regex.Editor assessment
This commit patches CVE-2026-41242. The subject `fix: filter invalid characters from the type name` states the concrete action and names the affected concept, though no scope is given even though the type-name parser would be the obvious one. The two-sentence body explains the rationale - a type name should only hold alphanumeric characters - and says a regex does the filtering, which is enough to understand the change without the diff. What it never says is why this matters for security: nothing hints that hostile input previously reached the type-name path. `Fixes #2124.` is a well-formed closing footer, so the message is clean and publishable, falling short of the top mark only for leaving the threat context unstated.