chore: import upstream snapshot with attribution

2026-07-13 13:20:55 +08:00
commit d25d482dc2
13754 changed files with 4996608 additions and 0 deletions
@@ -0,0 +1,19 @@
+import { validatePathSegment } from '@/lib/core/security/input-validation'
+
+const SUBREDDIT_PREFIX = /^r\//
+
+/**
+ * Normalizes a subreddit name by removing the 'r/' prefix if present and trimming whitespace.
+ * Validates the result to prevent path traversal attacks.
+ * @param subreddit - The subreddit name to normalize
+ * @returns The normalized subreddit name without the 'r/' prefix
+ * @throws Error if the subreddit name contains invalid characters
+ */
+export function normalizeSubreddit(subreddit: string): string {
+  const normalized = subreddit.trim().replace(SUBREDDIT_PREFIX, '')
+  const validation = validatePathSegment(normalized, { paramName: 'subreddit' })
+  if (!validation.isValid) {
+    throw new Error(validation.error)
+  }
+  return normalized
+}