fix: security improvements to checklist input (#444)

* feat: sanitize input for checklists * feat: add basic editor * feat: use plain text editor for checklist items * feat: remove key from user response
2026-03-16 14:31:13 +00:00
parent b8d1fe230d
commit 76b2c58461
6 changed files with 179 additions and 77 deletions
--- a/packages/api/src/routers/user.ts
+++ b/packages/api/src/routers/user.ts
@@ -31,7 +31,6 @@ export const userRouter = createTRPCRouter({
          .object({
            id: z.number(),
            prefix: z.string().nullable(),
-            key: z.string(),
          })
          .nullable(),
      }),
@@ -62,7 +61,7 @@ export const userRouter = createTRPCRouter({
      return {
        ...result,
        image: imageUrl,
-        apiKey: apiKey ?? null,
+        apiKey: apiKey ? { id: apiKey.id, prefix: apiKey.prefix } : null,
      };
    }),
  update: protectedProcedure