Search query validation

pug-sync.js

@@ -21,7 +21,7 @@ function addGlobals(obj) {
 }
 
 /** @type {Map<string, (from: string, event: import("h3").H3Event, locals: Record<string, any>) => Promise<string>>} */
-const beforeIncludes = new Map()
+const beforeIncludes = sync.remember(() => new Map())
 
 /**
  * So the idea with this one is that because I'm using htmx I want to be able to render certain page fragments on their own.

routes/schema.js

@@ -7,7 +7,7 @@ const schema = {
 		arrange: z.enum(["album", "artist", "label", "tag", "track"]),
 		shape: z.enum(["grid", "list"]),
 		filter_field: z.enum(["band_name", "band_url", "item_title", "item_id", "tag", "why"]).optional(),
-		filter: z.string().optional(),
+		filter: z.string().regex(/^[^%]+$/).optional(),
 		filter_fuzzy: z.enum(["true"]).optional()
 	}),
 	account: z.object({