Sanitize Telegram Markdown V2

Author: kubk

functions/server-bot/ignore-old-messages-middleware.ts

@@ -3,16 +3,16 @@ import { Context, NextFunction } from "grammy";
 const threshold = 5 * 60; // 5 minutes
 export async function ignoreOldMessageMiddleware(
   ctx: Context,
-  next: NextFunction
+  next: NextFunction,
 ): Promise<void> {
   if (ctx.message) {
     if (new Date().getTime() / 1000 - ctx.message.date < threshold) {
       await next();
     } else {
       console.log(
-        `Ignoring message from ${ctx.from?.id ?? 'Unknown ID'} at ${
-          ctx.chat?.id ?? 'Unknown Chat ID'
-        } (${new Date().getTime() / 1000}:${ctx.message.date})`
+        `Ignoring message from ${ctx.from?.id ?? "Unknown ID"} at ${
+          ctx.chat?.id ?? "Unknown Chat ID"
+        } (${new Date().getTime() / 1000}:${ctx.message.date})`,
       );
     }
   } else {

functions/server-bot/on-callback-query.ts

@@ -27,7 +27,9 @@ export const onCallbackQuery = (envSafe: EnvSafe) => async (ctx: Context) => {
       throw new Error(`Deck id ${deckId} is not valid`);
     }
     const state = await userGetServerBotState(envSafe, ctx.from.id);
-    assert(state?.type === "cardAdded", "State is not cardAdded");
+    if (state?.type !== "cardAdded") {
+      return;
+    }
     await userSetServerBotState(envSafe, ctx.from.id, {
       type: "deckSelected",
       cardBack: state.cardBack,

functions/server-bot/send-card-create-confirm-message.ts

@@ -7,6 +7,10 @@ import {
 } from "../db/user/user-set-server-bot-state.ts";
 import { CallbackQueryType } from "./callback-query-type.ts";
 
+const sanitizeMarkdown = (text: string) => {
+  return text.replace("-", "\\-");
+};
+
 export const sendCardCreateConfirmMessage = async (
   envSafe: EnvSafe,
   ctx: Context,
@@ -25,7 +29,9 @@ export const sendCardCreateConfirmMessage = async (
   await ctx.deleteMessage();
 
   await ctx.reply(
-    `Confirm card creation:\n\n*Front:*\n${state.cardFront}\n\n*Back:*\n${state.cardBack}`,
+    `Confirm card creation:\n\n*Front:*\n${sanitizeMarkdown(
+      state.cardFront,
+    )}\n\n*Back:*\n${sanitizeMarkdown(state.cardBack)}`,
     {
       parse_mode: "MarkdownV2",
       reply_markup: InlineKeyboard.from([