Every "filter=" parameter is a tiny programming language you hand to strangers. So start from the hostile programme: megabyte payloads, rule floods, regex bombs, integers past 2^53 rounding through float64, malformed shapes. In nurago, the filter package caps or rejects each class by default. And it filters only; authorisation stays yours. https://tecnick.com/articles/nurago-filter/ #golang #security