fix: require one regular character to submit posts, comments, and messages

app/Community/Livewire/Forms/ForumTopicCommentForm.php

@@ -5,18 +5,17 @@
 namespace App\Community\Livewire\Forms;
 
 use App\Models\ForumTopicComment;
+use App\Support\Rules\ContainsRegularCharacter;
 use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
 use Illuminate\Http\RedirectResponse;
 use Livewire\Attributes\Locked;
-use Livewire\Attributes\Validate;
 use Livewire\Features\SupportRedirects\Redirector;
 use Livewire\Form;
 
 class ForumTopicCommentForm extends Form
 {
     use AuthorizesRequests;
 
-    #[Validate('required|max:60000')]
     public string $body = '';
 
     #[Locked]
@@ -31,7 +30,14 @@ public function setForumTopicComment(ForumTopicComment $forumTopicComment): void
     public function update(): RedirectResponse|Redirector
     {
         $this->authorize('update', [ForumTopicComment::class, $this->forumTopicComment]);
-        $this->validate();
+        $this->validate([
+            'body' => [
+                'required',
+                'string',
+                'max:60000',
+                new ContainsRegularCharacter(),
+            ],
+        ]);
 
         editTopicComment($this->forumTopicComment->id, $this->body);
 

app/Community/Requests/MessageRequest.php

@@ -4,14 +4,20 @@
 
 namespace App\Community\Requests;
 
+use App\Support\Rules\ContainsRegularCharacter;
 use Illuminate\Foundation\Http\FormRequest;
 
 class MessageRequest extends FormRequest
 {
     public function rules(): array
     {
         return [
-            'body' => 'required|string|max:60000',
+            'body' => [
+                'required',
+                'string',
+                'max:60000',
+                new ContainsRegularCharacter(),
+            ],
             'recipient' => 'required_without:thread_id|exists:UserAccounts,User',
             'thread_id' => 'nullable|integer',
             'title' => 'required_without:thread_id|string|max:255',

app/Support/Rules/ContainsRegularCharacter.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Support\Rules;
+
+use Closure;
+use Illuminate\Contracts\Validation\ValidationRule;
+
+class ContainsRegularCharacter implements ValidationRule
+{
+    public function validate(string $attribute, mixed $value, Closure $fail): void
+    {
+        $decodedValue = html_entity_decode($value, ENT_QUOTES | ENT_HTML5, 'UTF-8');
+
+        // Check for at least one letter, number, punctuation mark, or symbol.
+        $requireOneRegularCharacter = '/[\p{L}\p{N}\p{P}\p{S}]/u';
+
+        if (!preg_match($requireOneRegularCharacter, $decodedValue)) {
+            $fail('validation.contains_regular_character')->translate();
+        }
+    }
+}

lang/en/validation.php

@@ -133,7 +133,7 @@
     /*
      * Strict validation rules
      */
-
+    'contains_regular_character' => 'The :attribute must contain at least one regular character.',
     'ctype_alnum' => 'The :attribute must only contain unaccented letters and numbers.',
 
     /*

public/request/comment/create.php

@@ -6,6 +6,7 @@
 use App\Models\Comment;
 use App\Models\Ticket;
 use App\Models\User;
+use App\Support\Rules\ContainsRegularCharacter;
 use Illuminate\Support\Arr;
 use Illuminate\Support\Facades\Validator;
 
@@ -14,7 +15,12 @@
 }
 
 $input = Validator::validate(Arr::wrap(request()->post()), [
-    'body' => 'required|string|max:2000',
+    'body' => [
+        'required',
+        'string',
+        'max:2000',
+        new ContainsRegularCharacter(),
+    ],
     'commentable_id' => 'required|integer',
     'commentable_type' => 'required|integer',
 ]);

public/request/forum-topic-comment/create.php

@@ -2,6 +2,7 @@
 
 use App\Models\ForumTopic;
 use App\Models\User;
+use App\Support\Rules\ContainsRegularCharacter;
 use Illuminate\Support\Arr;
 use Illuminate\Support\Facades\Validator;
 
@@ -11,7 +12,12 @@
 
 $input = Validator::validate(Arr::wrap(request()->post()), [
     'topic' => 'required|integer|exists:ForumTopic,ID',
-    'body' => 'required|string|max:60000',
+    'body' => [
+        'required',
+        'string',
+        'max:60000',
+        new ContainsRegularCharacter(),
+    ],
 ]);
 
 $userModel = User::firstWhere('User', $user);

tests/Unit/Rules/ContainsRegularCharacterTest.php

@@ -0,0 +1,65 @@
+<?php
+
+namespace Tests\Unit\Rules;
+
+use App\Support\Rules\ContainsRegularCharacter;
+use Illuminate\Support\Facades\Validator;
+use Tests\TestCase;
+
+class ContainsRegularCharacterTest extends TestCase
+{
+    public function testItPassesWhenInputContainsRegularCharacters(): void
+    {
+        $data = ['body' => 'This is a valid comment with letters and symbols!'];
+
+        $validator = Validator::make($data, [
+            'body' => ['required', 'string', new ContainsRegularCharacter()],
+        ]);
+
+        $this->assertFalse($validator->fails());
+    }
+
+    public function testItFailsWhenInputOnlyContainsControlCharacters(): void
+    {
+        $data = ['body' => "\u{200B}\u{200E}\u{200F}"];
+
+        $validator = Validator::make($data, [
+            'body' => ['required', 'string', new ContainsRegularCharacter()],
+        ]);
+
+        $this->assertTrue($validator->fails());
+    }
+
+    public function testItFailsWhenInputIsEmpty(): void
+    {
+        $data = ['body' => ''];
+
+        $validator = Validator::make($data, [
+            'body' => ['required', 'string', new ContainsRegularCharacter()],
+        ]);
+
+        $this->assertTrue($validator->fails());
+    }
+
+    public function testItPassesWhenInputIsOnlySymbols(): void
+    {
+        $data = ['body' => '***!!!'];
+
+        $validator = Validator::make($data, [
+            'body' => ['required', 'string', new ContainsRegularCharacter()],
+        ]);
+
+        $this->assertFalse($validator->fails());
+    }
+
+    public function testItFailsWhenInputContainsOnlyHtmlEscapeCodes(): void
+    {
+        $data = ['body' => '&#x200B;&#x200E;&#x200F;'];
+
+        $validator = Validator::make($data, [
+            'body' => ['required', 'string', new ContainsRegularCharacter()],
+        ]);
+
+        $this->assertTrue($validator->fails());
+    }
+}