Every string from the outside needs a maximum length
An unbounded string field on an unauthenticated endpoint is a bug. But the fix has a failure mode that can reject perfectly valid requests.
Tag
An unbounded string field on an unauthenticated endpoint is a bug. But the fix has a failure mode that can reject perfectly valid requests.