majiayu000 Input Sanitization and Zod (Advanced)
When to use this skill
- Every form that accepts user input (Reviews, Profile updates, Booking special requests).
- Before performing any database mutation in a Server Action.
Advanced Schema
import { z } from 'zod';
export const TourReviewSchema = z.object({
rating: z.number().min(1).max(5),
comment: z.string().trim()
.min(10, "Comment too short")
.max(500, "Comment too long")
.refine(s => !s.includes('<script>'), { message: "Invalid characters" }),
});
Instructions
- Server-Side Only: Validation MUST happen on the server (Server Action) even if you have client-side validation.
- Type Inference: Use
z.infer<typeof Schema>to generate TypeScript types from your validation logic. - Sanitization: Use
.trim(),.toLowerCase(), and custom transforms to clean data before persistence.