src/Appwrite/Platform/Modules/Tokens/Http/Tokens/Buckets/Files/XList.php (2)

72-85: Missing Cursor validator - inconsistent with other modules.

This file lacks the Cursor validation step that all other refactored files include. Other modules validate the cursor before extracting its value:

$validator = new Cursor();
if (!$validator->isValid($cursor)) {
    throw new Exception(Exception::GENERAL_QUERY_INVALID, $validator->getDescription());
}

Without this validation, invalid cursor queries may proceed and cause unexpected behavior downstream.

Proposed fix

Add the import and validation:

 use Utopia\Database\Database;
 use Utopia\Database\Document;
 use Utopia\Database\Query;
 use Utopia\Database\Validator\Authorization;
+use Utopia\Database\Validator\Query\Cursor;
 use Utopia\Database\Validator\UID;

 if ($cursor !== false) {
+    $validator = new Cursor();
+    if (!$validator->isValid($cursor)) {
+        throw new Exception(ExtendException::GENERAL_QUERY_INVALID, $validator->getDescription());
+    }
+
     $tokenId = $cursor->getValue();

---

21-23: Missing Action class import - code will fail at runtime.

The class extends Action on line 21, but there's no corresponding import statement. Other modules in this PR import it via use Utopia\Platform\Action;.

Proposed fix

 use Utopia\Database\Validator\Authorization;
 use Utopia\Database\Validator\UID;
+use Utopia\Platform\Action;
 use Utopia\Platform\Scope\HTTP;