Missing length/format validation on free-text DTO fields (engine Name, languages, unbounded TextIds/filter lists) in CreateEngine.cs, CreateWebhook.cs, CreateDataFile.cs, StartBuild.cs. Add [StringLength]/[MaxLength] and collection caps (also reduces the C2/M3 surface; [ApiController] auto-validates DataAnnotations).
Missing length/format validation on free-text DTO fields (engine
Name, languages, unboundedTextIds/filter lists) inCreateEngine.cs,CreateWebhook.cs,CreateDataFile.cs,StartBuild.cs. Add[StringLength]/[MaxLength]and collection caps (also reduces the C2/M3 surface;[ApiController]auto-validates DataAnnotations).