Merge pull request 'Bound title and language at create time (#86)' (#91) from fix-86-field-bounds into main

2026-09-09 15:59:32 +00:00
parent 5b068faf8f 389e4d333f
commit 959a83be1e
3 changed files with 217 additions and 0 deletions
@@ -165,6 +165,27 @@ func (a *apiServer) handleCreatePaste(w http.ResponseWriter, r *http.Request) {
 		writeErr(w, status, msg)
 		return
 	}
+	// #86: bound free-form metadata at create time
+	if p.Title != nil {
+		t, err := checkTitle(*p.Title)
+		if err != nil {
+			writeErr(w, 400, err.Error())
+			return
+		}
+		p.Title = &t
+	}
+	if p.Language != nil {
+		l, err := checkLanguage(*p.Language)
+		if err != nil {
+			writeErr(w, 400, err.Error())
+			return
+		}
+		if l == "" {
+			p.Language = nil
+		} else {
+			p.Language = &l
+		}
+	}
 	if p.BurnAfterReads != nil { // #68: reject negative read budgets
 		if err := parseBurnAfterReads(*p.BurnAfterReads); err != nil {
 			writeErr(w, 400, err.Error())