updated docstring

Author: daniel-sanche

packages/google-api-core/google/api_core/path_template.py

@@ -216,6 +216,8 @@ def _extract_and_validate_wildcards(
     if template_str is None or template_str == "*":
         # Single-segment templates (None or "*") cannot match exactly "." or ".."
         # and cannot have multi-segment paths resolving to 0 segments.
+        #
+        # Empty strings pose no traversal security risk here.
         if val and not _validate_multi_segment_value(val):
             raise err
     elif template_str == "**":

packages/google-api-core/tests/unit/test_path_template.py

@@ -829,6 +829,11 @@ def test_path_traversal_dots_validation_bare_double_star(
         ("projects/*/locations/**", "projects/([^/]+)/locations/(.+)", ("*", "**")),
         ("projects/abc", "projects/abc", ()),
         ("projects/my-project", r"projects/my\-project", ()),
+        (
+            r"my-test/{id}/v1.0?abc+def-g|h()\\",
+            r"my\-test/([^/]+)/v1\.0\?abc\+def\-g\|h\(\)\\\\",
+            ("*",),
+        ),
     ],
 )
 def test_build_capture_pattern(template_str, expected_pattern, expected_wildcards):