Function sanitize_label

graphify/security.py:393–404

Strip control characters and cap length. Safe for embedding in JSON data (inside tags) and plain text. For direct HTML injection, wrap the result with html.escape().

(text: str | None)

def sanitize_label(text: str | None) -> str:
    """Strip control characters and cap length.

    Safe for embedding in JSON data (inside <script> tags) and plain text.
    For direct HTML injection, wrap the result with html.escape().
    """
    if text is None:
        return ""
    text = _CONTROL_CHAR_RE.sub("", str(text))
    if len(text) > _MAX_LABEL_LEN:
        text = text[:_MAX_LABEL_LEN]
    return text


# ---------------------------------------------------------------------------