MergeWork MRWK

Bounty #92

MRWK bounty: 300 MRWK - reject C1 control characters across input validators

Review the reward, status, source issue, and acceptance criteria before starting.

Status paid
Reward per award 300 MRWK
Awards 1/1 paid
Remaining 0
Available 0 MRWK
Effective remaining 0
Effective available 0 MRWK

This bounty is paid; no awards are available for new submissions.

Acceptance

What has to be true

Accepted PR rejects C1 control characters before normalization, trimming, or parsing on the affected public/admin/API paths identified by current reviews, including admin webhook status filtering, wallet transfer nonce/integer parsing, and bounty list status/sort filtering. The fix should use shared validation where practical, keep clean inputs working, and include regression tests with at least one C1 example such as U+0085 on the relevant paths.

Contributor next steps

Before you start

Claim command
/claim
Reference formats
Bounty #644, Refs #644
Expected artifact
focused PR, issue, report, or evidence URL
  1. Confirm the source issue is still open and your change is not already covered by another PR.
  2. Keep the PR focused, link the source issue as Bounty #644, and include test or smoke-check evidence.
  3. Check active attempt reservations if you need to coordinate before opening a PR; attempts are advisory only and do not reserve MRWK, acceptance, or payment.
  4. No awards remain; treat new work as unpaid unless maintainers reopen the bounty.
Open source issue View source bounty matches View JSON details Check active attempts

Accepted work

1/1 awards paid.