Merge branch 'tiago/restrict-ascii-router-paths' (#2447)

* tiago/restrict-ascii-router-paths:
  changelog: add #2447
  Test router request handling with non-ascii paths
  Restrict router queries to ascii paths

.changelog/unreleased/bug-fixes/2447-restrict-ascii-router-paths.md

@@ -0,0 +1,2 @@
+- Restricted RPC router paths to ASCII characters to prevent crashes.
+  ([\#2447](https://github.com/anoma/namada/pull/2447))

crates/sdk/src/queries/router.rs

@@ -1031,8 +1031,29 @@ mod test {
         let result = TEST_RPC.handle(ctx, &request);
         assert!(result.is_err());
 
-        // Test requests to valid paths using the router's methods
+        // Test request with a non-ascii path
+        let request = RequestQuery {
+            path: "ÀÁõö÷øùúûüýþÿ".to_owned(),
+            data: Default::default(),
+            height: block::Height::from(0_u32),
+            prove: Default::default(),
+        };
+        let ctx = RequestCtx {
+            event_log: &client.event_log,
+            wl_storage: &client.wl_storage,
+            vp_wasm_cache: (),
+            tx_wasm_cache: (),
+            storage_read_past_height_limit: None,
+        };
+        let result = TEST_RPC.handle(ctx, &request);
+        assert!(matches!(
+            result,
+            Err(namada_storage::Error::SimpleMessage(
+                "Non-ascii request paths are unsupported",
+            ))
+        ));
 
+        // Test requests to valid paths using the router's methods
         let result = TEST_RPC.a(&client).await.unwrap();
         assert_eq!(result, "a");
 

crates/sdk/src/queries/types.rs

@@ -43,6 +43,11 @@ pub trait Router {
         D: 'static + DB + for<'iter> DBIter<'iter> + Sync,
         H: 'static + StorageHasher + Sync,
     {
+        if !request.path.is_ascii() {
+            return Err(namada_storage::Error::SimpleMessage(
+                "Non-ascii request paths are unsupported",
+            ));
+        }
         self.internal_handle(ctx, request, 0)
     }