Hello, I would like that when parsing a body request in ``` call.receive<FooRequest>()``` to s...

# ktor

[Luca Gentile]

Hello,
I would like that when parsing a body request in

call.receive<FooRequest>()

to sanitize all fields declared as String in FooRequest

What would you suggest?

[Aleksei Tirman [JB]]

The simplest thing would be to validate them after deserialization. Could you please describe your problem in more detail?

[e5l]

Hey @Luca Gentile, you can write validation in the init block of the FooRequest

[Luca Gentile]

I was thinking of something like: "every time the object mapper should transform a value from the call to a String property of the FooRequest, sanitize the field"

[e5l]

It depends on the serialization library you're using

[Luca Gentile]

at the moment I'm using Jackson

[e5l]

Yep, I guess only kotlinx.serialization allow you to do this in the init block, it should be default way in Jackson

[Luca Gentile]

ok, but that way for every DTO like FooRequest used in my api, I need to write a sanitation for string properties

[Luca Gentile]

I would like to do something that does that just in time, maybe you have some ideas

[Luca Gentile]

so that val dto = call.receive<AnyRequest>() inside dto every String is already trimmed, html escaped etc.

[Luca Gentile]

no matter the <AnyRequest>

[Luca Gentile]

without the need via init block in every FooRequest BarRequest

[Aleksei Tirman [JB]]

I didn't find any information on how you can do it with Jackson. You could probably use Kotlin reflection to sanitize all string fields after deserialization without introducing much code duplication.

[Luca Gentile]

me neither. Yeah, probably I'll go that way

[Luca Gentile]

thanks!