fix codeql scanners

Author: 3kh0

bun.lock

@@ -34,9 +34,9 @@ function computeClosedAt(poll) {
 }
 
 async function upsertByKey(table, keyField, keyValue, fields, createOnlyFields = {}) {
-  const escaped = String(keyValue).replace(/'/g, "\\'");
+  const formulaValue = JSON.stringify(String(keyValue));
   const existing = await base(table)
-    .select({ maxRecords: 1, filterByFormula: `{${keyField}} = '${escaped}'` })
+    .select({ maxRecords: 1, filterByFormula: `{${keyField}} = ${formulaValue}` })
     .firstPage();
 
   if (existing.length) {

lib/airtable.js

@@ -1,20 +1,23 @@
+import { compile } from "html-to-text";
+
 import { escapeMrkdwn } from "../postingGate.js";
 
 const MSG_NOT_FOUND = (term) => `:red-x: No definition found for "${escapeMrkdwn(term)}".`;
 const moreSensesLine = (n, term) =>
   `<https://en.wiktionary.org/wiki/${encodeURIComponent(term)}|+${n} more sense${n === 1 ? "" : "s"} not shown>`;
 
+const wikiHtmlToText = compile({
+  wordwrap: false,
+  selectors: [
+    { selector: "a", format: "inline" },
+    { selector: "ol", format: "skip" },
+    { selector: "script", format: "skip" },
+    { selector: "style", format: "skip" },
+  ],
+});
+
 function stripWikiHtml(html) {
-  return (html || "")
-    .replace(/<style[^>]*>[\s\S]*?<\/style>/gi, "")
-    .replace(/<ol[\s>][\s\S]*$/i, "")
-    .replace(/<[^>]+>/g, "")
-    .replace(/&amp;/g, "&")
-    .replace(/&lt;/g, "<")
-    .replace(/&gt;/g, ">")
-    .replace(/&#39;/g, "'")
-    .replace(/&quot;/g, '"')
-    .trim();
+  return wikiHtmlToText(html || "").trim();
 }
 
 function englishFirst(sections) {
@@ -72,11 +75,6 @@ export default {
       });
     if (rest.length)
       return respond({ response_type: "ephemeral", text: ":red-x: One word at a time, please." });
-    if (term.length > 50)
-      return respond({
-        response_type: "ephemeral",
-        text: ":red-x: One word at a time, please.",
-      });
     if (term.length > 50)
       return respond({
         response_type: "ephemeral",

lib/commands/define.js

@@ -25,6 +25,7 @@
     "dotenv": "^17.4.2",
     "drizzle-orm": "0.45.2",
     "hono": "^4.13.3",
+    "html-to-text": "^10.0.1",
     "tldts": "^7.4.10"
   },
   "devDependencies": {