From a962e793b0076fa4255510728a4cb35820fbe767 Mon Sep 17 00:00:00 2001
From: Charl Best <charl.best@toasttab.com>
Date: Fri, 15 Mar 2024 17:55:17 +0000
Subject: [PATCH] Limit profile field inputs

---
 .../account/(menu)/settings/edit_profile/+page.svelte  |  3 +++
 .../account/(menu)/settings/settings_module.svelte     |  2 ++
 src/routes/(admin)/account/api/+page.server.ts         | 10 ++++++++++
 src/routes/(admin)/account/create_profile/+page.svelte |  3 +++
 4 files changed, 18 insertions(+)

diff --git a/src/routes/(admin)/account/(menu)/settings/edit_profile/+page.svelte b/src/routes/(admin)/account/(menu)/settings/edit_profile/+page.svelte
index 18a2622c..243ec1b6 100644
--- a/src/routes/(admin)/account/(menu)/settings/edit_profile/+page.svelte
+++ b/src/routes/(admin)/account/(menu)/settings/edit_profile/+page.svelte
@@ -28,16 +28,19 @@
       label: "Name",
       initialValue: profile?.full_name ?? "",
       placeholder: "Your full name",
+      maxlength: 50,
     },
     {
       id: "companyName",
       label: "Company Name",
       initialValue: profile?.company_name ?? "",
+      maxlength: 50,
     },
     {
       id: "website",
       label: "Company Website",
       initialValue: profile?.website ?? "",
+      maxlength: 50,
     },
   ]}
 />
diff --git a/src/routes/(admin)/account/(menu)/settings/settings_module.svelte b/src/routes/(admin)/account/(menu)/settings/settings_module.svelte
index ded30bf0..eeb6d8ed 100644
--- a/src/routes/(admin)/account/(menu)/settings/settings_module.svelte
+++ b/src/routes/(admin)/account/(menu)/settings/settings_module.svelte
@@ -18,6 +18,7 @@
     label?: string
     initialValue: string | boolean
     placeholder?: string
+    maxlength?: number
   }
 
   // Module context
@@ -96,6 +97,7 @@
                 ? 'input-error'
                 : ''} input-sm mt-1 input input-bordered w-full max-w-xs mb-3 text-base py-4"
               value={$page.form ? $page.form[field.id] : field.initialValue}
+              maxlength={field.maxlength ? field.maxlength : null}
             />
           {:else}
             <div class="text-lg mb-3">{field.initialValue}</div>
diff --git a/src/routes/(admin)/account/api/+page.server.ts b/src/routes/(admin)/account/api/+page.server.ts
index 0e236a10..46a919c0 100644
--- a/src/routes/(admin)/account/api/+page.server.ts
+++ b/src/routes/(admin)/account/api/+page.server.ts
@@ -203,20 +203,30 @@ export const actions = {
     const website = formData.get("website") as string
 
     let validationError
+    const fieldMaxTextLength = 50
     const errorFields = []
     if (!fullName) {
       validationError = "Name is required"
       errorFields.push("fullName")
+    } else if (fullName.length > fieldMaxTextLength) {
+      validationError = `Name must be less than ${fieldMaxTextLength} characters`
+      errorFields.push("fullName")
     }
     if (!companyName) {
       validationError =
         "Company name is required. If this is a hobby project or personal app, please put your name."
       errorFields.push("companyName")
+    } else if (companyName.length > fieldMaxTextLength) {
+      validationError = `Company name must be less than ${fieldMaxTextLength} characters`
+      errorFields.push("companyName")
     }
     if (!website) {
       validationError =
         "Company website is required. An app store URL is a good alternative if you don't have a website."
       errorFields.push("website")
+    } else if (website.length > fieldMaxTextLength) {
+      validationError = `Company website must be less than ${fieldMaxTextLength} characters`
+      errorFields.push("website")
     }
     if (validationError) {
       return fail(400, {
diff --git a/src/routes/(admin)/account/create_profile/+page.svelte b/src/routes/(admin)/account/create_profile/+page.svelte
index 81d09a71..d71af2e5 100644
--- a/src/routes/(admin)/account/create_profile/+page.svelte
+++ b/src/routes/(admin)/account/create_profile/+page.svelte
@@ -57,6 +57,7 @@
               ? 'input-error'
               : ''} mt-1 input input-bordered w-full max-w-xs"
             value={form?.fullName ?? fullName}
+            maxlength="50"
           />
         </div>
 
@@ -73,6 +74,7 @@
               ? 'input-error'
               : ''} mt-1 input input-bordered w-full max-w-xs"
             value={form?.companyName ?? companyName}
+            maxlength="50"
           />
         </div>
 
@@ -89,6 +91,7 @@
               ? 'input-error'
               : ''} mt-1 input input-bordered w-full max-w-xs"
             value={form?.website ?? website}
+            maxlength="50"
           />
         </div>