/**
 * Sanitization Utilities
 * Secure input cleaning for user data
 */

export const SECURITY_LIMITS = {
  EMAIL_MAX_LENGTH: 254,
  PASSWORD_MIN_LENGTH: 6,
  PASSWORD_MAX_LENGTH: 128,
  NAME_MAX_LENGTH: 100,
  GENERAL_TEXT_MAX_LENGTH: 500,
} as const;

export type SecurityLimitKey = keyof typeof SECURITY_LIMITS;

/**
 * Internal helper to sanitize whitespace
 * Used by sanitizeName
 */
const sanitizeWhitespace = (input: string): string => {
  if (!input) return '';
  return input.trim().replace(/\s+/g, ' ');
};

export const sanitizeEmail = (email: string): string => {
  if (!email) return '';
  const trimmed = email.trim().toLowerCase();
  return trimmed.substring(0, SECURITY_LIMITS.EMAIL_MAX_LENGTH);
};

export const sanitizePassword = (password: string): string => {
  // Don't trim passwords - leading/trailing whitespace may be intentional
  // Only enforce max length for security
  if (!password) return '';
  return password.substring(0, SECURITY_LIMITS.PASSWORD_MAX_LENGTH);
};

export const sanitizeName = (name: string): string => {
  if (!name) return '';
  const trimmed = sanitizeWhitespace(name);
  const noTags = trimmed.replace(/<[^>]*>/g, '');
  return noTags.substring(0, SECURITY_LIMITS.NAME_MAX_LENGTH);
};