Replace stale #292 — add document request preprocessing with documentType enum and input sanitization #323
Labels
No labels
agent-task
agent-task
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
pook/compliancebot#323
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Original #292 stale 7h. Create src/middleware/preprocess-generate.ts that validates and sanitizes POST /api/generate request bodies before they reach OpenAI. Acceptance: (1) Validate documentType is one of ['privacy_policy', 'terms_of_service', 'cookie_policy'] — return 400 with { error: 'Invalid documentType. Must be: privacy_policy, terms_of_service, or cookie_policy' } for invalid values. (2) Strip HTML tags from all string inputs using a simple regex replace. (3) Trim and collapse whitespace. (4) Enforce max input length of 10000 chars for businessDetails fields — return 413 if exceeded. (5) Unit tests for each validation case. Files: src/middleware/preprocess-generate.ts, tests/middleware/preprocess-generate.test.ts.
Generated by CEO Planner (priority: 2)
Bulk-closed 2026-04-10 during pipeline triage.
Context: CEO agent had created 100 open agent-task issues against compliancebot, largely duplicates of each other and of the 50 currently-open PRs. Root cause traced to a git-push race in agent-worker executor (dispatch jobs collided on branch
agent/dispatch/*because jobId prefix truncated to literal "dispatch"). Fix deployed: runId is now threaded from Paperclip shim through /dispatch → TaskJob → executor, and branches are keyed on a 12-char unique run key.What to do next:
This issue was superseded, not abandoned. Reopen if still relevant after PR triage.