fix: escape text for slack api

uffy · uffy · commit cb95e18a99ea · 2024-12-26T17:08:40.000+08:00
diff --git a/next/api/src/integration/slack/message.ts b/next/api/src/integration/slack/message.ts
@@ -41,11 +41,21 @@ export class Message {
   }
 }
 
-function getTicketLink(ticket: Ticket): string {
+function escapeSlackCharacters(text:string) {
+  return text
+    .replace(/&/g, '&amp;')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;');
+}
+
+function getTicketLink(ticket:Ticket) {
   let title = ticket.title;
   if (title.length > 50) {
     title = title.slice(0, 47) + '...';
   }
+  // Escape special characters in the title
+  title = escapeSlackCharacters(title);
+
   return `<${ticket.getUrl()}|*#${ticket.nid}: ${title}*>`;
 }
 

Original file line number	Diff line number	Diff line change
`@@ -41,11 +41,21 @@ export class Message {`
`41`	`41`	`}`
`42`	`42`	`}`
`43`	`43`
`44`		`-function getTicketLink(ticket: Ticket): string {`
	`44`	`+function escapeSlackCharacters(text:string) {`
	`45`	`+ return text`
	`46`	`+ .replace(/&/g, '&')`
	`47`	`+ .replace(/</g, '<')`
	`48`	`+ .replace(/>/g, '>');`
	`49`	`+}`
	`50`	`+`
	`51`	`+function getTicketLink(ticket:Ticket) {`
`45`	`52`	`let title = ticket.title;`
`46`	`53`	`if (title.length > 50) {`
`47`	`54`	`title = title.slice(0, 47) + '...';`
`48`	`55`	`}`
	`56`	`+ // Escape special characters in the title`
	`57`	`+ title = escapeSlackCharacters(title);`
	`58`	`+`
`49`	`59`	return `<${ticket.getUrl()}\|#${ticket.nid}: ${title}>`;
`50`	`60`	`}`
`51`	`61`