fix: Use URI.getPath() in ExtrasPathValidator; remove duplicate test

Author: thced

src/main/java/com/retailsvc/http/internal/ExtrasPathValidator.java

@@ -2,8 +2,6 @@
 
 import com.retailsvc.http.BadRequestException;
 import java.net.URI;
-import java.net.URLDecoder;
-import java.nio.charset.StandardCharsets;
 import java.util.regex.Pattern;
 
 public final class ExtrasPathValidator {
@@ -31,11 +29,9 @@ public static String validateAndDecode(URI uri) {
       }
     }
 
-    String decoded;
-    try {
-      decoded = URLDecoder.decode(raw, StandardCharsets.UTF_8);
-    } catch (IllegalArgumentException e) {
-      throw new BadRequestException("malformed percent-encoding");
+    String decoded = uri.getPath();
+    if (decoded == null) {
+      throw new BadRequestException("missing path");
     }
 
     for (int i = 0; i < decoded.length(); i++) {

src/test/java/com/retailsvc/http/internal/ExtrasPathValidatorTest.java

@@ -53,13 +53,6 @@ void backslashRejected() {
     assertReject("/files/x%5Cy");
   }
 
-  @Test
-  void literalBackslashRejected() throws Exception {
-    URI uri = new URI("/files/x%5cy");
-    assertThatThrownBy(() -> ExtrasPathValidator.validateAndDecode(uri))
-        .isInstanceOf(BadRequestException.class);
-  }
-
   @Test
   void nulByteRejected() {
     assertReject("/files/x%00.txt");