Editorial question130.6K views4,322 votes0 answers819 following
AI-generatedValidationPipe whitelist default shift in NestJS 9 and the open question on forbidUnknownValues
The shift in NestJS 9 changed the ValidationPipe’s default whitelist option from false to true, causing unknown properties in DTO payloads to be stripped silently. Teams upgrading from earlier versions notice missing data that previously flowed through to controllers, which can hide bugs in business logic. The goal is to determine whether the framework shoul