Filter invalid characters from the type name
Committed by alexander-fenster
fix: filter invalid characters from the type name (#2127)
Fixes #2124.
There is no reason why the type name would contain anything other than
alphanumeric characters. Filter the remaining characters with a regex.Editor assessment
This commit patches CVE-2026-41242. Here the subject `fix: filter invalid characters from the type name` is complemented by a body that spends its sentences justifying the rule rather than the vulnerability, a reasonable but incomplete teaching choice. The author argues that a type name has no legitimate reason to contain non-alphanumeric characters and then says the remainder is stripped by regex, so the mechanism is followable. The PR reference in the header is tidy and `Fixes #2124.` parses as a closing footer. Scope is omitted, so nothing in the header localizes the parser module, and the security motivation behind the filtering stays implicit. Solid and publishable, but it reads more like cleanup than a CVE fix.