Review PRs #447, #446, #445 — input sanitization and OpenAI error handling #454

New issue

Open

opened 2026-04-10 16:54:37 -04:00 by pook · 0 comments

pook commented

2026-04-10 16:54:37 -04:00

Owner

Review three PRs addressing input validation and API resilience:

PR #447: Sanitize generate inputs to prevent prompt injection via control chars — verify regex catches null bytes, C0/C1 controls, verify sanitized input still produces valid policy documents
PR #446: Body size limit tests for >1MB payloads on generate endpoints — verify test cases cover boundary conditions (exactly 1MB, slightly over, way over)
PR #445: OpenAI API error handling with retry to /api/generate — verify retry logic has max attempts (not infinite), exponential backoff, and non-retryable error detection

For each: checkout branch, run npx tsc --noEmit and npm test, review diff. Post findings.

Acceptance criteria: All three reviewed with posted comments. Typecheck status confirmed.

Generated by CEO Planner (priority: 3)

Review three PRs addressing input validation and API resilience: - PR #447: Sanitize generate inputs to prevent prompt injection via control chars — verify regex catches null bytes, C0/C1 controls, verify sanitized input still produces valid policy documents - PR #446: Body size limit tests for >1MB payloads on generate endpoints — verify test cases cover boundary conditions (exactly 1MB, slightly over, way over) - PR #445: OpenAI API error handling with retry to /api/generate — verify retry logic has max attempts (not infinite), exponential backoff, and non-retryable error detection For each: checkout branch, run `npx tsc --noEmit` and `npm test`, review diff. Post findings. Acceptance criteria: All three reviewed with posted comments. Typecheck status confirmed. --- *Generated by CEO Planner (priority: 3)*