From e594eb909bb101811ab12eeeb8032b289b19c240 Mon Sep 17 00:00:00 2001
From: durn <bb711081@gmail.com>
Date: Thu, 23 Apr 2026 19:57:49 -0600
Subject: [PATCH] profanity checking for user profile and account creation

---
 .../resources/templates/create-account.html   | 35 +++++++++++-
 src/main/resources/templates/my-profile.html  | 53 ++++++++++++++++++-
 2 files changed, 86 insertions(+), 2 deletions(-)
diff --git a/src/main/resources/templates/create-account.html b/src/main/resources/templates/create-account.html
index 7e304aa..731e1c3 100644
--- a/src/main/resources/templates/create-account.html
+++ b/src/main/resources/templates/create-account.html
@@ -8,6 +8,7 @@
     <title>Create Thyme Crunch Account</title>
     <link rel="stylesheet" th:href="@{css/create-account.css}">
     <link href="https://fonts.googleapis.com/css2?family=Delius+Swash+Caps&family=Mali:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;1,200;1,300;1,400;1,500;1,600;1,700" rel="stylesheet">
+    <script th:src="@{/js/bad-words-list.js}"></script>
 </head>
 <body>
 
@@ -58,6 +59,28 @@
 </html>
 
 <script>
+
+	function isProfane(str) {
+	  	const lower = str.toLowerCase();
+	  	return bannedWords.some(word => lower.includes(word));
+	}
+	
+	function showError(input, message) {
+		  input.classList.add('invalid');
+
+		  let error = input.parentElement.querySelector('.error-message');
+		  if (!error) {
+		    error = document.createElement('p');
+		    error.className = 'error-message';
+		    error.style.color = 'red';
+		    error.style.fontSize = '0.9em';
+		    error.style.marginTop = '6px';
+		    input.parentElement.appendChild(error);
+		  }
+
+		  error.textContent = message;
+		}
+	
     document.addEventListener("DOMContentLoaded", function () {
 
         const form = document.getElementById("createUserForm");
@@ -68,9 +91,10 @@
         function checkPasswords() {
             if (confirmPasswordField.value === "") {
                 confirmPasswordField.classList.remove("invalid");
-                passwordError.textContent = "";
+                passwordError.textContent = "Password cannot be blank";
                 return;
             }
+            
 
             if (passwordField.value !== confirmPasswordField.value) {
                 confirmPasswordField.classList.add("invalid");
@@ -89,12 +113,21 @@
 
             const password = passwordField.value;
             const confirmPassword = confirmPasswordField.value;
+            const name = document.getElementById("username").value;
+            const email = document.getElementById("email").value;
 
             if (password !== confirmPassword) {
                 confirmPasswordField.classList.add("invalid");
                 passwordError.textContent = "Passwords do not match.";
                 return;
             }
+            
+            if (isProfane(document.getElementById("username").value)) {
+        	    showError(username, 'Username contains inappropriate language');
+        	    return;
+          	}
+            
+
 
             const userData = {
                 username: document.getElementById("username").value,
diff --git a/src/main/resources/templates/my-profile.html b/src/main/resources/templates/my-profile.html
index 4d25971..42a8b26 100644
--- a/src/main/resources/templates/my-profile.html
+++ b/src/main/resources/templates/my-profile.html
@@ -7,6 +7,7 @@
     <title>My Profile - Thyme Crunch</title>
     <link rel="stylesheet" th:href="@{css/my-profile.css}">
     <link href="https://fonts.googleapis.com/css2?family=Delius+Swash+Caps&family=Mali:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;1,200;1,300;1,400;1,500;1,600;1,700" rel="stylesheet">
+	<script th:src="@{/js/bad-words-list.js}"></script>
 </head>
 <body>
 
@@ -88,7 +89,7 @@
                     <label for="bio">Bio</label>
                     <textarea id="bio" th:field="*{bio}" rows="6" maxlength="1000"></textarea>
                 </div>
-                <button type="submit">Save</button>
+                <button type="submit" value='submit request' onclick='return btnClick();'>Save</button>
             </form>
 
         </div>
@@ -97,6 +98,56 @@
 </div>
 
 <script>
+function isProfane(str) {
+	  const lower = str.toLowerCase();
+	  return bannedWords.some(word => lower.includes(word));
+}
+</script>
+<script>
+function btnClick() {
+    const displayNameEl = document.getElementById('displayName');
+    const bioEl = document.getElementById('bio');
+    
+    clearError(displayNameEl);
+    clearError(bioEl);
+
+    if (isProfane(displayNameEl.value)) {
+        showError(displayNameEl, "Display name contains inappropriate language.");
+        return false;
+    }
+    if (isProfane(bioEl.value)) {
+        showError(bioEl, "Bio contains inappropriate language.");
+        return false;
+    }
+    return true;
+
+    function showError(input, message) {
+        input.classList.add('invalid');
+
+        let error = input.parentElement.querySelector('.error-message');
+        if (!error) {
+            error = document.createElement('p');
+            error.className = 'error-message';
+            error.style.color = 'red';
+            error.style.fontSize = '0.9em';
+            error.style.marginTop = '6px';
+            input.parentElement.appendChild(error);
+        }
+
+        error.textContent = message;
+    }
+    
+    function clearError(input) {
+    	  input.classList.remove('invalid');
+    	  const error = input.parentElement.querySelector('.error-message');
+    	  if (error) error.remove();
+    	}
+}
+</script>
+
+<script>
+	
+	
     // For cost display <!-- Cost change -->
 	function renderCost(cost) {
     const num = parseInt(cost, 10);
