Function validate_connector_path 

pub fn validate_connector_path(
    path: &str,
    allowed_prefixes: &[&str],
) -> Result<()>

Rejects a *path wildcard value unless it is an absolute, traversal-free path under one of allowed_prefixes. This is the only user-influenced input that reaches the controller as a raw path segment rather than a query/body value, so it gets its own defense-in-depth check on top of whatever the controller itself enforces.

Errors

Returns UnifiError::ConnectorPath if path looks unsafe (empty, relative, contains .., an encoded separator, or a null byte) or falls outside allowed_prefixes.