Function sanitize

web/src/server/free-session/abuse-review.ts:171–173

* Strip characters that could be used to break out of the block * or inject bogus tags the model might follow. We're not trying to be * watertight (the model's system prompt is the primary defence), but * blocking the obvious cases is cheap.

(value: string)

 * blocking the obvious cases is cheap.
 */
function sanitize(value: string): string {
  return value.replace(/[<>]/g, '').replace(/\r?\n/g, ' ').slice(0, 200)
}