DOCSP-40348: disallow commas in oidc prop val (#553)

* DOCSP-40348: disallow commas in oidc prop val

* fix

* AS PR fixes 1

* MK tech review

* MK changes

* MK changes

(cherry picked from commit fc5ef5a)

Author: rustagir

source/fundamentals/enterprise-auth.txt

@@ -317,17 +317,25 @@ If your application runs on an Azure VM, or otherwise uses the
 support.
 
 You can specify Azure IMDS OIDC authentication either by 
-using a ``MongoCredential`` or as part of the connection string. Select the 
-:guilabel:`Connection String` or :guilabel:`MongoCredential` tab to
+using a ``MongoCredential`` or as part of the connection string.
+
+Select from the :guilabel:`Connection String` or :guilabel:`MongoCredential` tabs to
 see the corresponding syntax.
 
 .. tabs::
 
    .. tab:: Connection String
       :tabid: mongodb-azure-imds-connection-string
 
-      Replace the ``<percent-encoded audience>`` placeholder with the percent-encoded
-      value of the ``audience`` server parameter configured on your MongoDB deployment.
+      Replace the ``<percent-encoded audience>`` placeholder in the
+      following code with the percent-encoded value of the audience server
+      parameter configured on your MongoDB deployment.
+
+      The comma (``,``) character and its encoding (``%2C``) are
+      reserved, and using these characters in a value causes the
+      driver to interpret commas as delimiters of key-value pairs.
+      You must specify values that contain commas in a ``MongoCredential`` instance, as
+      demonstrated in the :guilabel:`MongoCredential` tab.
 
       .. code-block:: java
 
@@ -360,25 +368,33 @@ see the corresponding syntax.
 .. _java-mongodb-oidc-gcp-imds:
 
 GCP IMDS
-++++++++++
+++++++++
 
 If your application runs on a GCP VM, or otherwise uses the
 `GCP Instance Metadata Service <https://cloud.google.com/compute/docs/metadata/querying-metadata>`__,
 you can authenticate to MongoDB by using {+driver-short+}'s built-in GCP
 support.
 
 You can specify GCP IMDS OIDC authentication either by 
-using a ``MongoCredential`` or as part of the connection string. Select the 
-:guilabel:`Connection String` or :guilabel:`MongoCredential` tab to
+using a ``MongoCredential`` or as part of the connection string.
+
+Select from the :guilabel:`Connection String` or :guilabel:`MongoCredential` tabs to
 see the corresponding syntax.
 
 .. tabs::
 
    .. tab:: Connection String
       :tabid: mongodb-gcp-imds-connection-string
 
-      Replace the ``<percent-encoded audience>`` placeholder with the percent-encoded
-      value of the ``audience`` server parameter configured on your MongoDB deployment.
+      Replace the ``<percent-encoded audience>`` placeholder in the
+      following code with the percent-encoded value of the audience server
+      parameter configured on your MongoDB deployment.
+
+      The comma (``,``) character and its encoding (``%2C``) are
+      reserved, and using these characters in a value causes the
+      driver to interpret commas as delimiters of key-value pairs.
+      You must specify values that contain commas in a ``MongoCredential`` instance, as
+      demonstrated in the :guilabel:`MongoCredential` tab.
 
       .. code-block:: java