Rack Middleware for Input Sanitization

1 post · Sep 2013

What this trail covers

This feature thread tracks the development and enhancement of Shopify's Rack middleware for input sanitization. Initial efforts focused on addressing issues with invalid form submissions during user login, specifically when users provided malformed shop URLs. The solution involved creating a custom Rack middleware that runs before OmniAuth to sanitize and recover bad form data, preventing errors caused by invalid URIs. This middleware utilizes a strategy pattern for different sanitization techniques. The implementation was open-sourced as the `param_sanitizer` gem.

All Shopify trails

Sep 2013Building a Rack Middleware - ShopifyThis post details the creation of a custom Rack middleware to sanitize invalid user input for shop URLs before they are passed to OmniAuth. It explains the problem of malformed shop URLs (e.g., including 'http://' or spaces) and how this leads to URI exceptions. The solution involves implementing a middleware that runs before OmniAuth, using a strategy pattern for sanitization. A specific strategy for cleaning whitespace and converting spaces to dashes is demonstrated. The post also outlines the basic structure of a Rack response and how middleware is initialized.
Advertisement