Merge pull request #720 from traPtitech/feat/validate-uuid

idパラメータがUUIDとしてvalidかどうかをチェックする close #571

src/components/MessageWidget.ts

@@ -7,7 +7,7 @@ import { render } from '../markdown/markdown'
 import { getStore } from '../store'
 import { QuotedMessage } from './QuotedMessage'
 import { File } from './File'
-import { dateToString } from '../utils'
+import { dateToString, isValidUuid } from '../utils'
 import { EmbeddingFile, EmbeddingMessage } from '@traptitech/traq-markdown-it'
 
 import '../markdown/markdown.scss'
@@ -35,6 +35,15 @@ const InnerMessageWidget = async (
       </article>
     `
   }
+  if (!isValidUuid(id)) {
+    return html`
+      <article class="main-message message" data-is-error>
+        <main class="error">
+          不正なメッセージIDです。URLが間違っていませんか？
+        </main>
+      </article>
+    `
+  }
 
   try {
     const message = (await apis.getMessage(id)).data

src/utils.ts

@@ -10,3 +10,6 @@ export const dateToString = (date: string): string => {
 
   return `${day} ${time}`
 }
+
+export const isValidUuid = (uuidStr: string) =>
+  /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(uuidStr)