Skip to content

I am trying to push my changes for the sanitizer #451

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
AkhilRB0204 wants to merge 7 commits into
base: develop
Choose a base branch
from
Open

I am trying to push my changes for the sanitizer #451

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
795feb2
sanitize function start
AkhilRB0204 Jan 12, 2026
0b5b6f8
sanitizer
AkhilRB0204 Jan 14, 2026
dc7c24b
sanitizer
AkhilRB0204 Jan 24, 2026
871d69e
Sanitizer
AkhilRB0204 Jan 27, 2026
f4c4491
Merge branch 'develop' into develop
AkhilRB0204 Jan 27, 2026
abd10b8
Sanitizer enhancements
AkhilRB0204 Jan 30, 2026
8149f5d
Sanitizer Improvements
AkhilRB0204 Jan 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file added .DS_Store
View file
Open in desktop
Binary file not shown.
60 changes: 54 additions & 6 deletions server/api/views/assistant/sanitizer.py
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,26 +1,74 @@
import re
import logging

logger = logging.getLogger(__name__)
def sanitize_input(user_input:str) -> str:
"""
Sanitize user input to prevent injection attacks and remove unwanted characters.

Args:
user_input (str): The raw input string from the user.

Returns:
str: The sanitized input string.
"""
try:
# Remove any script tags
sanitized = re.sub(r'<script.*?>.*?</script>', '', user_input, flags=re.IGNORECASE)
# Remove any HTML tags
sanitized = user_input

# Remove any style tags
sanitized = re.sub(r'<style.*?>.*?</style>', '', sanitized, flags=re.IGNORECASE)

# Remove any HTML/script tags
sanitized = re.sub(r'<.*?>', '', sanitized)

# Remove Phone Numbers
sanitized = re.sub(r'\+?\d[\d -]{8,}\d', '[Phone Number]', sanitized)

# Remove Email Addresses
sanitized = re.sub(r'[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}', '[Email Address]', sanitized)

# Remove Medical Record Numbers (simple pattern)
sanitized = re.sub(r'\bMRN[:\s]*\d+\b', '[Medical Record Number]', sanitized, flags=re.IGNORECASE)

# Normalize pronouns
sanitized = normalize_pronouns(sanitized)

# Escape special characters
sanitized = re.sub(r'["\'\\]', '', sanitized)
sanitized = re.sub(r'\s+', '', sanitized)

# Limit length to prevent buffer overflow attacks
max_length = 1000
max_length = 5000
if len(sanitized) > max_length:
sanitized = sanitized[:max_length]

return sanitized.strip()
except Exception as e:
logger.error(f"Error sanitizing input: {e}")
return ""
return ""

def normalize_pronouns(text:str) -> str:
"""
Normalize first and second person pronouns to third person clinical language.

Converts patient centric pronouns to a more neutral form.
Args:
text (str): The input text containing pronouns.
Returns:
str: The text with normalized pronouns.
"""
# Normalize first person possessives: I, me, my, mine -> the patient
text = re.sub(r'\bMy\b', 'The patient\'s', text)
text = re.sub(r'\bmy\b', 'the patient\'s', text)

# First person subject: I -> the patient
text = re.sub(r'\bI\b', 'the patient', text)

# First person object: me -> the patient
text = re.sub(r'\bme\b', 'the patient', text)

# First person reflexive: myself -> the patient
text = re.sub(r'\bmyself\b', 'the patient', text)

# Second person: you, your -> the clinician
text = re.sub(r'\bYour\b', 'the clinician', text)
return text