rackspace/repose — pull request #434 by RackerWilliams (2012-10-24 06:24:36+00:00)
Title: Validator fixes

Patched a number of flaws with the api-validator.

1. Use a patched version of the checker-core (1.0.1.1), this simply brings in a new version of WADL tools, which contains a bug fix where certain WADLs with shared resource_types were not parsed correctly.

2. Fixed a security flaw where the role was matched using "contains" instead of "equals" -- this can potentially be used to bypass a validator.

3. Ensure that validators are matched in the same order as what is seen in the config file. This allows the user to handle some set of priority.