feat(utils): add string utilities#5
Conversation
Co-authored-by: DHV Team <dhvteam@users.noreply.github.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
Warning Rate limit exceeded
⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (1)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
There was a problem hiding this comment.
1 issue found across 1 file
Prompt for AI agents (unresolved issues)
Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.
<file name="src/utils/stringUtils.ts">
<violation number="1" location="src/utils/stringUtils.ts:33">
P1: `highlightSearchTerm` generates raw HTML from unsanitized input, which can lead to XSS when the returned string is rendered as HTML.</violation>
</file>
Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.
| if (!term.trim()) return text; | ||
| const escaped = term.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'); | ||
| const regex = new RegExp('(' + escaped + ')', 'gi'); | ||
| return text.replace(regex, '<mark>$1</mark>'); |
There was a problem hiding this comment.
P1: highlightSearchTerm generates raw HTML from unsanitized input, which can lead to XSS when the returned string is rendered as HTML.
Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At src/utils/stringUtils.ts, line 33:
<comment>`highlightSearchTerm` generates raw HTML from unsanitized input, which can lead to XSS when the returned string is rendered as HTML.</comment>
<file context>
@@ -0,0 +1,34 @@
+ if (!term.trim()) return text;
+ const escaped = term.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+ const regex = new RegExp('(' + escaped + ')', 'gi');
+ return text.replace(regex, '<mark>$1</mark>');
+}
</file context>
1 participant
String helpers for Vietnamese text processing.
Co-authored-by: DHV Team dhvteam@users.noreply.github.com
Summary by cubic
Add a set of small string utilities to help with Vietnamese text handling, masking sensitive data, and simple display formatting. These helpers improve consistency across the app.
Written for commit 7630f03. Summary will update on new commits.