scriptoriumadmin/GitNexus
1
0
Fork 0
mirror of https://github.com/abhigyanpatwari/GitNexus.git synced 2026-09-22 00:31:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 11

fix(wiki): validates already sanitized --lang value to only accept alphabets

Browse source
This commit is contained in:
sanguine59 2026-05-17 16:47:06 +07:00
parent f951627595
commit c6a36f4e75
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
gitnexus/src/core/wiki/generator.ts
View file

@ -184,12 +184,12 @@ export class WikiGenerator {
* Append an output-language instruction to a system prompt when --lang is set.
*/
private buildSystemPrompt(base: string): string {
// Strip control characters and newlines, then cap length to prevent prompt injection.
// Strip control characters, trim, cap length, then validate against a character allowlist.
const lang = (this.options.lang ?? '')
.replace(/[\x00-\x1F\x7F]/g, '')
.trim()
.slice(0, 50);
if (!lang) return base;
if (!lang || !/^[a-zA-Z -]+$/.test(lang)) return base;
return `${base}\n\nIMPORTANT: Write ALL documentation content in ${lang}. This includes prose, code comments in examples, and diagram labels. Note: page titles (H1 headings) are generated separately and will remain in English.`;
}