feat: filter invalid challenge ids during progression transfer

thepeacockproject · Feb 1, 2025 · ba943e0 · ba943e0
1 parent a0b18bd
commit ba943e0
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/components/webFeatures.ts b/components/webFeatures.ts
@@ -372,9 +372,9 @@ webFeaturesRouter.post(
                 false,
                 {
                     profileid: req.query.user,
-                    challengeids: controller.challengeService.getChallengeIds(
-                        req.query.gv,
-                    ),
+                    challengeids: controller.challengeService
+                        .getChallengeIds(req.query.gv)
+                        .filter((id) => uuidRegex.test(id)), // filter out potential bogus challenge ids added by plugins
                 },
             )