fix(selectors): tighten SharePoint site ID validation to exclude underscores

waleedlatif1 · claude · waleedlatif1 · commit 3c76b473a1f1 · 2026-03-06T06:29:57.000-08:00
SharePoint composite site IDs use hostname,guid,guid format where only
alphanumerics, periods, hyphens, and commas are valid characters.

Co-Authored-By: Claude Opus 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/apps/sim/lib/core/security/input-validation.ts b/apps/sim/lib/core/security/input-validation.ts
@@ -584,7 +584,7 @@ export function validateSharePointSiteId(
     }
   }
 
-  if (!/^[\w.\-,]+$/.test(value)) {
+  if (!/^[a-zA-Z0-9.\-,]+$/.test(value)) {
     logger.warn('Invalid characters in SharePoint site ID', {
       paramName,
       value: value.substring(0, 100),

Original file line number	Diff line number	Diff line change
`@@ -584,7 +584,7 @@ export function validateSharePointSiteId(`
`584`	`584`	`}`
`585`	`585`	`}`
`586`	`586`
`587`		`- if (!/^[\w.\-,]+$/.test(value)) {`
	`587`	`+ if (!/^[a-zA-Z0-9.\-,]+$/.test(value)) {`
`588`	`588`	`logger.warn('Invalid characters in SharePoint site ID', {`
`589`	`589`	`paramName,`
`590`	`590`	`value: value.substring(0, 100),`