From ba943e0f1c7fb86df3586ee11dff58537b1d5c49 Mon Sep 17 00:00:00 2001
From: Govert de Gans <grappigegovert@hotmail.com>
Date: Sun, 2 Feb 2025 00:07:52 +0100
Subject: [PATCH] feat: filter invalid challenge ids during progression
 transfer

---
 components/webFeatures.ts | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/components/webFeatures.ts b/components/webFeatures.ts
index 776ea39a..b9c575b1 100644
--- a/components/webFeatures.ts
+++ b/components/webFeatures.ts
@@ -372,9 +372,9 @@ webFeaturesRouter.post(
                 false,
                 {
                     profileid: req.query.user,
-                    challengeids: controller.challengeService.getChallengeIds(
-                        req.query.gv,
-                    ),
+                    challengeids: controller.challengeService
+                        .getChallengeIds(req.query.gv)
+                        .filter((id) => uuidRegex.test(id)), // filter out potential bogus challenge ids added by plugins
                 },
             )