const express = require('express');
const bodyParser = require('body-parser');
const sanitization = require('login.dfe.sanitization');

const app = express();
app.use(bodyParser.urlencoded({ extended: true }));

// This line must come AFTER using body-parser
app.use(sanitization());

app.use(sanitization({
  sanitizeQuery: false,
}));

app.use(sanitization({
  sanitizeBody: false,
}));

app.use(sanitization({
  sanitizer: (key, value) => {
    if(key.toLowerCase() === 'uid') {
      return !/^[A-Za-z0-9]+$/.test(value) ? '' : value;
    } else {
      // You can still call the default sanitizer too
      return sanitization.defaultSanitizer(key, value);
    }
  },
}));