From 683670afa1e51e9bdab95c610cdc830b83b6fa6b Mon Sep 17 00:00:00 2001 From: curo1305 Date: Mon, 1 Jun 2026 14:31:32 +0200 Subject: [PATCH] fix(06.2): WR-02 constrain format parameter to Literal[csv] to reject unsupported formats --- backend/api/audit.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/backend/api/audit.py b/backend/api/audit.py index 0fe714b..9e2b9e9 100644 --- a/backend/api/audit.py +++ b/backend/api/audit.py @@ -27,7 +27,7 @@ import json import re import uuid from datetime import datetime -from typing import Optional +from typing import Literal, Optional from fastapi import APIRouter, Depends, HTTPException, Query from fastapi.responses import StreamingResponse @@ -313,7 +313,7 @@ async def export_audit_log( end: Optional[datetime] = Query(default=None), user_handle: Optional[str] = Query(default=None), event_type: Optional[str] = Query(default=None), - format: str = Query(default="csv"), # noqa: A002 + format: Literal["csv"] = Query(default="csv"), # noqa: A002 session: AsyncSession = Depends(get_db), _admin: User = Depends(get_current_admin), ) -> StreamingResponse: