🐛 sanitize application input

commonhaus · Jun 10, 2024 · 2a68d8d · 2a68d8d
1 parent 681a745
commit 2a68d8d
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/cf-admin-bot/src/main/java/org/commonhaus/automation/admin/api/ApplicationData.java b/cf-admin-bot/src/main/java/org/commonhaus/automation/admin/api/ApplicationData.java
@@ -19,6 +19,7 @@ public class ApplicationData {
             "([\\s\\S]*?<!--CONTRIBUTION::-->)([\\s\\S]*?)(<!--::CONTRIBUTION-->[\\s\\S]*?)", Pattern.CASE_INSENSITIVE);
     static final Pattern NOTES = Pattern.compile("([\\s\\S]*?<!--NOTES::-->)([\\s\\S]*?)(<!--::NOTES-->[\\s\\S]*?)",
             Pattern.CASE_INSENSITIVE);
+    static final Pattern STRIP_COMMENTS = Pattern.compile("<!--:?:?(CONTRIBUTION|NOTES):?:?-->", Pattern.CASE_INSENSITIVE);
 
     transient String title;
     transient MembershipApplication application;
@@ -103,8 +104,8 @@ public static String issueContent(MemberSession session, ApplicationPost applica
                 """.formatted(
                 session.login(),
                 session.url(),
-                applicationPost.contributions(),
-                applicationPost.additionalNotes());
+                STRIP_COMMENTS.matcher(applicationPost.contributions()).replaceAll(" "),
+                STRIP_COMMENTS.matcher(applicationPost.additionalNotes()).replaceAll(" "));
     }
 
     public static String createTitle(MemberSession session) {