googleapis / googleapis/mcp-toolbox

Updating `templateParameter` name to `unsafeParameter`

Open
#900 0 comments 0 reactions 0 assignees View on GitHub
priority: p2 type: feature request
Dominant language
Go
Stars
16.4k
Forks
1.7k
Avg merge
4d 9h
Merged PRs (30d)
85

Description

### Prerequisites

- [x] Search the [current open issues](https://github.com/googleapis/genai-toolbox/issues)

### What are you trying to do that currently feels hard or impossible?

The current `templateParameter` might be less intuitive towards user that the usage of template parameter might have higher risks for sql injection. Because of this, Toolbox recommend users to use regular parameters instead of template parameter whenever possible.

There's another issue that address the possible mitigations to reduce security risks #779 for template parameter.

### Suggested Solution(s)

Consider renaming `templateParameter` to `unsafeParameter` or `dangerousTemplateParameter`.

### Alternatives Considered

_No response_

### Additional Details

_No response_

Contributor guide

Open the contributing guide

Research direction

Start by searching the repository for uses of `templateParameter`, then read issue #779 for the related security context. Determine the affected user-facing references and what consistency is required for a completed rename; the issue does not identify specific files or tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
backend-api-design, security
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.