fix: Incomplete multi-character sanitation (#2228)

theopensystemslab · Sep 20, 2023 · a37f659 · a37f659
1 parent 03e24e2
commit a37f659
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 1 deletion.
diff --git a/editor.planx.uk/package.json b/editor.planx.uk/package.json
@@ -83,6 +83,7 @@
     "rxjs": "^7.8.1",
     "scroll-into-view-if-needed": "^2.2.31",
     "sharedb": "^3.3.1",
+    "striptags": "^3.2.0",
     "swr": "^2.2.0",
     "tippy.js": "^6.3.7",
     "uuid": "^9.0.0",

diff --git a/editor.planx.uk/pnpm-lock.yaml b/editor.planx.uk/pnpm-lock.yaml
diff --git a/editor.planx.uk/src/@planx/components/Send/bops/index.ts b/editor.planx.uk/src/@planx/components/Send/bops/index.ts
@@ -28,6 +28,7 @@ import {
   ResponseMetaData,
   USER_ROLES,
 } from "../model";
+import striptags from "striptags";
 
 export const bopsDictionary = {
   // applicant or agent details provided via TextInput(s) or ContactInput component
@@ -231,7 +232,7 @@ export const makePayload = (
       if (flow[id]?.data?.policyRef) {
         metadata.policy_refs = [
           // remove html tags
-          { text: flow[id].data.policyRef.replace(/<[^>]*>/g, "").trim() },
+          { text: striptags(flow[id].data.policyRef) },
         ];
       }
       metadata = addPortalName(id, flow, metadata);